I'm the only IT person at a small business, and we're looking to add cloud backup and recovery alongside two Synology NAS devices. The goal is to keep systems running if the office is lost or hit by ransomware.
Our managed service provider recommends Axcient x360Recovery. I've also received similar quotes for solutions using Veeam and Rubrik. How should I compare them, and what should I be asking about recovery?
Start with the recovery requirements, not the product names. Which systems must come back first, how long can each be down, and how much data can the business afford to lose? Get the people who rely on those systems to agree to the targets.
Then ask each provider to demonstrate a recovery against those targets. Cloud backup storage and the ability to run a server in the cloud are different things. Check which workloads can boot there, how users would connect, what dependencies need to come up first, and how you would move everything back after the office is rebuilt. Include cloud compute, network access, storage, and recovery charges in the comparison.
A similar quote doesn't mean the same service. Get the responsibilities in writing, especially who declares a disaster, starts recovery, monitors backups, and tests restores.
Axcient's cloud boot capability sounds relevant to the scenario you described. If your provider knows that platform well, that is worth something during a stressful recovery. Ask them to show you a test boot and explain what is included in your particular quote, rather than assuming every workload is covered.
Veeam and Rubrik are worth evaluating too, but compare the complete service each vendor is offering. The software alone doesn't tell you who will operate the recovery or how much work lands on you.
Don't overlook the ransomware side. Two local NAS devices are useful, but check whether an attacker with your normal admin credentials could delete or encrypt both local and cloud copies. Ask about immutable or otherwise protected copies, separate credentials, retention, and how the backup management system itself gets rebuilt.
Test a restore regularly, including a full system recovery, not just a single file. A successful backup notification isn't proof that the business can operate from the restored system.
Cloud restores can take a while if you're pulling a lot of data back over an internet connection. Work out the data volumes and available bandwidth, then test the timing. If the downtime target is tight, compare cloud failover with an offsite recovery location or replicated systems, including the cost and ongoing management.
porchlight_is_optional:
Running a backup in the cloud may avoid waiting for a full download, but users still need a working connection and the applications may depend on other systems.
Keeping the Synology devices and adding Synology C2 could be worth looking at as an offsite backup option, especially if you need an interim step. Just check what it actually protects and how restores work. Don't assume a cloud copy of the NAS also gives you the cloud failover environment you're after.
Answers are reviewed before publication.
glossary_of_gadgets:
Also ask what happens if the managed provider is unavailable. A team of one needs a recovery procedure and access that don't depend on a single person answering the phone.