ASR
15 TopicsASR Replication is stuck at "Waiting for First Recovery Point"
Hi All, I am trying to add ASR for one of my setup[VM's] present in Azure environment. But, all the VM's are stuck in "Waiting for First Recovery Point". Please find more details below. Configuration: 1. All the VM's re located in "East US2" 2. All the VM's are installed with Linux[Cent OS] Status of ASR: Created a new Recovery Service Vault “SoakASR-Vault” Enabled Replication for 3 servers for 3 performance servers. You can find the replicated servers in “SoakASR-Vault | Replicated items” Issue: All the 3 servers are stuck at “Waiting for First Recovery Point" Observations: I have created Recovery Services Vault in “Central US”. But, I see Network Mapping as WEST US in "Site Recovery infrastructure | Network mapping" Extension update is failing at "Site Recovery infrastructure | Extension update settings" I see 'Installing Mobility Service and preparing target' with status as “Completed with Information” message. Error ID: 151083 Error Message: Site recovery mobility service update completed with warnings Please help if you have any idea where I am going wrong. Thanks in advance.14KViews0likes2CommentsExclusions in Attack Surface Reduction rules in Block mode
We configured all ASR rules to "Audit mode" to see what would have been blocked in the last few days. The following rules stick out: Block Office communication application from creating child processes: here basically one app (detected file is a pdf reader) creates a few hundred detections per day. This pdf reader app is triggered by Outlook (source app) in 99% of the cases. I assume this is because opening attachments in an email opens the pdf reader. This does not look malicious. Am I right to assume that I should white list the app before enabling this rule in "Block mode"? Also: should Outlook or the pdf reader be added to the exclusions? Block credential stealing from the Windows local security authority subsystem (lsass.exe): a few hundred detections happen here by all kinds of source apps (e.g. Taskmgr.exe, DropboxUpdate.exe, svchost.exe, ...). Detected file is lsass.exe. Is there anything to whitelist here, or should I just enable the rule in "Block mode"? What will the impact on the user machine look like? Block Office applications from injecting code into other processes: only office applications are listed as source app (Word, Excel, PowerPoint), but the detected file is always a specific document, e.g. Document1.xlsx or PowerPoint2.pptx. There are like 30 detections in the last week. What action is exactly causing an office application to inject code into other processes? Is it safe to enable this rule in "Block mode"? Block executable files from running unless they meet a prevalence, age, or trusted list criteria: here I can see detections when users are installing something on their machine, e.g. Setup.exe or Webex.exe. I understand, that if I enable this rule, those installations will fail. How should I define trusted list criteria in order to allow some of those executables? I cannot just whitelist C:\Users\User1\Desktop\Setup.exe because I don't know how the names of all those Setup.exe files are called. What method is there to define which executable is allowed?Solved9.5KViews0likes4CommentsAzure Site Replication - VM not listed in Select Virtual Machines
Can any shed any insight. I am trying to do ASR for various VMs on 2 on-prem HyperVs and one of the vm's is not listed when you are trying to select the vm's. I am able to see all others and currently have many replicating properly.5.2KViews0likes1CommentMigrating VMs with greater than 8TB disk
Hello All, I wanted to see if anyone had experience with migrating VMs to Azure with data disks that are greater than 8TB in size. How did you handle it? can we use databox for something like that? This would be from a VMware environment on prem to Azure. Thanks1.7KViews0likes2CommentsCognitive Service and Data compliance
I have a requirement to use LUIS and Speech API in a chatbot for Indian users. Also need to ensure that user utterance doesn't go outside of India for data compliance. I was able to see that both API support Central India region on this link : https://azure.microsoft.com/en-in/global-infrastructure/services/?products=cognitive-services®ions=non-regional,central-india,south-india,west-india Query: Does hitting a Indian region ensure that data doesn't travel outside of India?1.2KViews0likes0CommentsApplication Control - LOB Application Exclusions
Hi, Consider I've tested Application Control in either audit or enforce mode (setting from Endpoint Manager/Endpoint Protection/AC). Everything seems to work fine except a few LOB-applications. Questions: How do I exclude these LOB-applications from Application Control? I think I've read about that you need to combine Application Control with Applocker for exclusions is that true? If that's the case where can I find documentation on how to setup exclusions? If that's true - does the exclusions need to be managed by GPO or can it be managed via MDM only? (AAD Join only)1.1KViews0likes1CommentASR NIC names
Hey all, I've just started to look into ASR and ran my first test form VMware to Azure. Something that I noticed was when I did my failover on my test machines, the NIC name was the vm instance name + a guid of some description. I know I can rename the NIC post failover, but is there a way I can rename it pre failover? We're looking to use ASR as a migration tool to move some 300 odd VM's. I'd rather do the pre NIC naming work so that it fits our new naming convention rather than scripting all the changes after. Would appreciate any insight and advice. Thanks Matt974Views0likes0CommentsReplicate Azure Pack IaaS Workloads to Azure using ASR
First published on TECHNET on Feb 15, 2015 A few months back, we announced Azure Site Recovery (ASR)’s integration with Azure Pack, which enabled our Service Providers to start offering Managed Disaster Recovery for IaaS Workloads using ASR and Azure Pack.775Views0likes0Comments