Name: Rubrik Demo: Unstructured Data Protection
Uploaded: 2025-09-25T17:01:01.316Z
Duration: 31 min 44 s
Description: Rubrik Demo: Unstructured Data Protection

Transcript for "Rubrik Demo: Unstructured Data Protection": Hey, everyone. Good morning, good afternoon, good evening, depending on where you're joining us from. Welcome to this Rubik live session featuring Rubik protection for unstructured data. Quick introduction. My name is Altika Singh, and I'm a senior technical marketing manager here at Rubik. I've been with Rubrik for almost four years now, and I do cover, everything that is customer facing and technical in nature for our unstructured data, SaaS data protection, for our database workloads, and AI workloads. Quick agenda. I'll walk us through what the current challenges with unstructured data protection is, give you an overview of Rubik protection for unstructured data, as well as give you a live demo what the solution looks like. I do want to focus on the demo, so I'll try to wrap up my slides as soon as I can. And I will leave you with a couple of resources at the very end so you can take a look at them and dive in deeper and then reach out to us if you have any questions. With that, let's get started. So first off, what is unstructured data? So when you think about unstructured data, it's essentially data that is not structured, which is data which doesn't have a fixed size, fixed type, and it cannot be saved in a in your typical database such as, your Oracle or your SQL databases. The best example is your laptop's home directory. Right? It has executables. It has PDFs. It has docs. It has Excel files. It has all sorts of data, and they all are of different sizes. Even if they are of the same type, they are of different sizes. The other examples include medical images. So your CT scan, your X rays, your social media content, your EDA tools, the data from that. If you look at every vertical, be it finance, retail, health care, every vertical now has unstructured data in some form or the other. So why are we talking about this now? Now over the past two decades, there has been a lot of effort to make everything digitally available. So the data is growing exponentially. Now the stat says that whatever any organization has, the amount of data they have, it's going to be seven x in the next couple of years. And to top it off, currently, about 80 to 85% of that entire dataset is unstructured in nature, which is going to grow to 90% in the next couple of years. Now if you look at medical images, right, so they are sensitive in nature. This data needs to be accessed only by the patient and the doctor. Right? So this cannot be freely available to everyone. So you should know where this data lives. If it was your structured data world, you know exactly which database has sensitive information. You can lock it down. However, when it comes to unstructured data, your data is spread across different applications, different filers. It could be on prem. It could be in the different cloud. Right? So you need to have an idea where your sensitive data is located. So in case of a cyber attack, you know what your exposure looks like. And, also, on a day to day basis, you're not violating any compliance regulations. Right? So in case of, especially in case of health care, HIPAA will come after you and fine you heavily if your data is not locked down. So it's really important to understand that you need to protect your unstructured data same way as you protect your structured data. So there are solutions available for protecting your unstructured data, and let me walk through a couple of, of them. First one is snap and replicate. So as the name suggests, you take a snapshot of your primary filer and you replicate it to another filer. The thing with that is that the primary and the secondary filer needs to be of the exact same model, the same vendor. They need to be at the same firmware level. There's very less flexibility in having different vendors. Right? So the other aspect is that think about the scenario that if a cyber attacker is actually in your environment, the attacker has access to your primary storage. You can be rest assured that they will find where your secondary replicated, data is. They will not only encrypt your primary data, but also encrypt your secondary data. So even if you have immutability in place on your secondary filer, you may not be able to get to that and actually recover from it. That's why, you know, you need a solution that that can offer you that air gapped protection. Second one is NDMP. Now this solution was designed in the nineteen nineties where, you know, the datasets were tens or hundreds of terabytes. Very few organizations such as The US, Congress Library had petabyte scale of data. So for a couple of hundreds of terabytes, the solution works great. But when you're talking about petabyte scale, which is most of the customers, most of our prospects, this solution doesn't scale. And next, we come to archiving to tape. Now tape is very similar to snap and replicate. If an attacker is in your environment, they will get access to your tape archive. The thing with tape archive is that you need to figure out which tape actually has your backup, get it online, recover from it. So it's not a very simple and easy process. So it's a you know, you will be spending a lot of time to even do a file restore, and it's it's not worth your time. So net net, all of it is very expensive, very inflexible, in nature, which is why Rubrik invested in protecting your unstructured data. Now what Rubrik offers is a cyber proof solution, which is not only air gapped, but also offers credential isolation and also immutable backups at a petabyte scale. So if your dataset currently is hundreds of terabytes and, you see that you have a path to petabyte in the next couple of years, don't worry about it. Rubrik will scale, and we are talking not just a petabyte. We're talking about hundreds of petabyte. Rubik can seamlessly scale with your data and ensure that your SLA requirements are met for your or your recovery as well. Now what does solution looks like? Let's talk about that. So there are three components to it. One is your own data. Now your own data can live on premise across different filers. It could be Nutanix, Dell, NetApp, Pure. And don't worry if your vendor is not listed here. Not all of them are listed, but Rubik supports pretty much every NAS file that's out there. We also have to support on premise three storage as well as data that is in different clouds, all tiers of storage. No problem. The middle portion, which is the Rubrik side of things, it consists of Rubrik Security Cloud that has centralized management plane, and then a stateless virtual machine that actually connects to your source, scans all your data, and index and moves them. Now I want to highlight a couple of, couple of things that makes the solution scale and also very fast. Okay. First off, you onboard your filer through Google Security Cloud, assign an SLA to meet, define your backup frequency where you want to store your backups, and also how long you want to, save the data for. Right? Once that is defined, based on that, the timing, the stateless virtual machine gets an action. When it's time to back up, essentially, it will connect to your filers, be it on prem or if it's cloud, it'll connect to your, storage layer, And then essentially spin up multiple threads. Now each thread is independent of one another, and they're performing different tasks. So there could be, like, 100, threads that are scanning different shares, 100 could be indexing, and, a 100 could be moving the data to your destination. Right? So as soon as the scanning is complete by a thread, it, just moves it to another, indexing thread, and then that moves to moving aspect. So nothing is dependent on each other. It just everything happens in parallel because of which we can give you the performance and also scale to petabyte scale. And last but not the least is your destination. You have multiple options. So you can either do NAS or object storage, or you can use any of the public cloud or Rubrik Cloud Vault. Now Rubrik Cloud Vault is a Rubrik, hosted subscription. So you just pay a fee and, connect to it, and you can just save your data. It gives you the true air gapped immutable storage. When it comes to on premise and public cloud, we are dependent on customers to make sure that they have immutability turned on, they have credential isolation so that we can provide the air gapped and immutable backups. One thing I do want to highlight, say you have, you know, NetApp filers on prem as your data source. What Rubik allows you to do is you can either store it in the public cloud or you can use it you can actually save it on, vast data. So it gives you this flexibility of using any source and save it to any destination. So net net, you can maximize your inventory of hardware, or you can use multiple clouds as well. So what about, sensitive data and anomaly detection, and how are we giving you cyber resilience? Right? So first off, our entire platform is designed on zero trust, data protection principle. So that is built in, MFA. All communication is encrypted. Everything is logically air gapped so that, you know, if an attacker has access to your production environment, they don't get access to your backup environment and make sure that you have a good copy to recover from. Next up is anomaly detection. Like the name suggests, we actually provide insights if we find any anomalies. So what we do is that once the first backup is completed and the next backup happens, we actually do the comparison between the backups to identify if there are major encryption events out of the blue. Right? It learns, there's a lot of machine learning that's in place. So it learns about your infrastructure, what's normal, what's not normal. So it will look for that deviation. So if there are things getting randomly, like millions of files just got deleted or millions of files just got encrypted. So those kind of events, anomalies is what the tool looks for and then lets you know that there are things happening in your infrastructure before it becomes a full blown attack. You can take actions based on anomaly detection. And, last but not the least is sensitive data monitoring. As in when the backup happens, Rubrik actually looks for sensitive data. Now I will show a demo of this, but we do have analyzers that look for Social Security numbers or your credit card information. And these are prebuilt analyzers, so it will scan your entire backup and tell you where your sensitive data is located, who has access to it, and if the access has changed. Right? Like, there's open access suddenly. So you can lock down your data before it's compromised. So on a day to day basis, you can use this information to make sure that you're meeting your compliance requirements. And in case of a cyber attack, you can use this information to figure out your sensitive data exposure as well. And with that, I will pause and switch over to my demo and then show you everything in action. So now, I have logged on to my Rubik's security cloud or RSC instance. This is a centralized dashboard that gives you an overview of, essentially, what's protected on cloud, SaaS, or your data center. You can get your unstructured data information here as well. Let's get into our unstructured data protection. So for that, I'll go to clusters and launch the stateless virtual machine. To set this up is fairly simple. Just click on setup. We do support, different hypervisors. Like, you can see here, Hyper V, KVM, or, you know, you can do e c two AWS instance as well. Just click one of them. I'm just selecting Hyper V. Click on generate virtual machine, and then you can just download it. And then go to your hypervisor, and then just deploy it. So once it connects to Rubik's Security Cloud, you can then click and go to that instance. First thing you do need to do is add your NAS filer or whatever your, production data is. Now, click on add systems. Now there's a huge drop down menu. You can see that there are vendors like NetApp, Azure Files. They are already listed. However, if you have a system which is not listed here, don't be alarmed. You know, you can use a generic NFS or v four SMB or s three, connectors to connect to your filer. There are multiple options to get your systems onboarded, basically. Once you just do that, I'm going to click on Isilon. Just provide the IP address, and then you do have to provide username and password so it can connect to your Isilon in this case and then add all the shares. Right? Discover all the shares. Right here, you see that I've already added a lot of, systems. So I'm just going to pick one of them. This particular one, it's an Isilon system. You can see that there are actually five shares that have already been discovered. So you're good to go there. Next up, you will have to define an SLA policy or create a backup policy to define your backup frequency. So just click on policy. There are two types, backup or archive. So in this case, we are going to look at backup frequency. You can, select how frequently you want to back up. I'm just gonna select twice a day. Add a target. I'm just going to select my RCV storage. And then how long you want to keep your backup, very simple. I'm just going to select thirty days. You can add another option, meaning if based on your SLA requirements, if you're required to actually, maybe you do a monthly as well on top of daily backups, you can define that in the same policy and just give it a name and then click on and that will be created for you. So I'm going to check out of this right now because I have some policies already created. So I'll go back to the system, and you see this particular share. It doesn't have any SLA policies applied to it. So just click on the share under protection. Right now it's set to unprotected. So if you check the drop down menu, a lot of policies which you can just apply and start protecting. If I just hit on apply, essentially, it'll start doing the backups for this particular system. I do want to showcase a couple of things here. Right? Maybe not this one go to one which is already protected. And, yeah, you can apply multiple policies as well to match your SLA requirements. You can do a complete restore of a share directly from this menu. You can actually do some backup exclusions. You can actually do a copy operation. Now I want to talk about copy a little bit because, a lot of times, if you're if you're migrating from a system to a newer system or just moving to a cheaper system, right, it can be a tedious process, but Rubik actually simplifies that for you. So you just need to select copy. The share is obviously automatic automatically selected, and then you can define what your destination is. Either it can be another system or a cloud. Right? So if you're doing a lot of migration, you can use Rubrik for that purpose also. And it's it's a very simple process. Like, literally, it can be a onetime operation. It can be a daily operation if you want to keep it up to date. There's a lot you can do, from here as well. With that, we'll talk about some recovery options. When we do indexing, we actually save a lot send a lot of metadata to Rubik's Security Cloud. This metadata has got nothing to do with your actual data, But, you know, the file names, where it's located, when it was last accessed, who accessed it, has it been updated. And I'll show you how we can use that information. Now for recovery purposes, like, if you just add the name, based on the index data, it will tell you everything that has the name test in it. So there's a folder that are actually PDFs that, have the name test in it. Like, for example, I'll just click on a a file. I can click restore, and then I can actually also go and recover the entire folder if I want. Right? So there are multiple options. If there are multiple snapshots available, you can select which one you want to recover from. Another cool thing which I really love is the data discover feature. You see all these colors. Right? So these are our temperature check on your data. Once you actually add your system, once the indexing is complete and your system is added, it also tells you when the data was last accessed, who accessed it, and if it was modified or not. Right? So, like, here, you see, like, orange is if the data is modified in the last thirty days versus green is thirty to one eighty days and then so on. Now you can change this to match your requirement. You can change colors. You can essentially define what, this period looks like for you. I'm just gonna keep default and, look into one of the shares. Right here. So if you look here, there's about 450 gigabyte of data that's, you know, being changed and modified in the last thirty days. There is two seventy gig of data that's being modified in the in the six month period. You might wanna keep that in the primary system. But, however, you can see there is 108 gigabyte of data that's actually, not being used or modified in the past one year. And now this is a test system, so I have just 100 gig of data. Right? Now you're talking about at enterprise level, it could be petabyte of data. And if it's not being used, what you can do is just click into that and then look at these three dots. Essentially, it gives you the option to archive. So if I click on it, I can select where I want to archive this to. And then that way, I still have a copy of the data. And then you can actually clean up your primary storage and use that space for something else. And you can do that across all your systems. So be it on prem, in the cloud, you can make sure that you're you're just, you know, safeguarding your investments and repurposing a lot of space for data that's actually been used. If you do need to ever revisit your archive data, you can always do a recovery to any of the shares and use that data as well. With that, this is all the protection aspect of things, but I do want to touch a little bit about anomaly detection and sensitive data monitoring. So I'll head back to, Rubik's Security Cloud and head to first, I'll get to data threat analytics and head to anomalies. Just filter out for NAS CloudDirect. And, like, you can see here that there is a share or an object, that actually has log bit anomaly. There are a lot of suspicious things going on. Things are getting added, deleted, modified, etcetera. So I can click on the object and get a feel for when the activity first started, what is the suspicious behavior, how long it's going on for, like, the event timeline timeline essentially shows you that. So you can see, like, the high with high confidence and high level of encryption is fine, is found. So now you can start digging in and seeing if there are actually attackers present in your system, in your entire infrastructure or not. You can actually dive in deeper, click on browse, and then you can further go into the systems. So it exactly tells you which folder, the deleted or the suspicious events. So, you know, you can dig in deeper. You can actually perform recovery. You can just select all the deleted files and click on recover. We do offer multiple options as well for recovery. So there's a lot you can do from anomaly detection also. That way, you are well prepared in case of a cyber attack. The other thing I want to talk about is sensitive data monitoring. And for that, I'll head to data security posture. Again, head to objects, and then get to NASS CloudDirect. Okay. Oh, yeah. I did want to mention that NASS CloudDirect is another name for our unstructured data protection. If if you're a current customer and trying to figure that out, that's what you will see in your RSC instance. So here, what we see is there are two objects essentially that have sensitive data hits. So I'm gonna click on the first one, and this particular share actually has high sensitive hits to, like, 88 k. And you can see what data categories or the data types are. So it has files that contain passport numbers, UK, national insurance, item, and amongst Social Security numbers and other things. So, it has found all the exact file where your sensitive data is located. So, you know, you can just go, to the file directly, download this information, a, for your legal team, if there's a cyber attack that, you know, you could be looking at a sensitive data exposure, or to your compliance team if it's being accessible by everyone in the organization. So you do want to log this, these kind of files down. Right? So, you can do a lot of things, once this information is available for you across all your shares, whether it's on prem or in the cloud. Okay. That is the end of the demo. It's a very high level demo. We'll head back to the slide. And, you know, to end, I do want to leave you with a couple of resources. We have a very detailed technical white paper on how this entire solution actually works. There's a shorter ebook for unstructured data. There's a virtual hands on. It's a amazing tool to learn what exactly you will do once you make the purchase or decide to become a Rubik customer. And all the other resources are available on the resource page as well. We do regularly host Rubik workshop events where we can dive in deeper. Like, we will not talk much about what the problem statement is, but essentially take you through how your backup process works, how your recovery works, what are the options. So dive in a lot more technically deeper. So if you're interested, you can attend one of them as well. And with that, I'm at the end of my presentation. Thank you for listening in, and have a good day. Take care.