This lesson will allow you to practice Cyber Recovery and CyberSense with NetWorker file-system backups. It covers everything from protecting files, replicating them to the vault and analyzing them with CyberSense, and then simulating a malware attack, analysis of the attacked data and gathering information about the attack using the CyberSense UI.

In this module you will run a NetWorker end-to-end workflow which includes:

\-Run a fresh backup of **client1.demo.local (/data)** using production NetWorker

\-Create a Cyber Recovery Policy

\-Secure Copy Analyze the data using Cyber Recovery and CyberSense

\-Run [infect.sh](http://infect.sh) script to infect the data in the **/data** directory on **client1.demo.local**

\-Run another backup of the infected data on **client1.demo.local (/data)** using production NetWorker

\-Secure Copy Analyze the data using Cyber Recovery and CyberSense

Recovery Sandbox cleaning from previous module

In case this lab session was used for the Networker Automated Recovery module, you need to delete the existing **NetWorker Recovery Sandbox** first:

In the Cyber Recovery UI, navigate to **Recovery --&gt; Recovery Sandboxes**, select the NetWorker sandbox and click **Cleanup**

Login to Production NetWorker UI using Google Chrome bookmark **NetWorker-Prod**

Use the following credentials:

**Username:** administrator\
**Password:** Password123!

Navigate to **Protection** **--&gt; Clients.**

Select **client1.demo.local** and click **Edit**

Scroll down in the **General** tab, and change the directory you will protect from **/temp** to **/data** in the Save Sets box.

Click **Save**

The file-system backup of client1.demo.local and the NetWorker Server DR backup are stored on a destination pool that's using the MTree /data/col1/NW-FS which is replicated to the vault. You used this replication context in the previous module.

In this module you'll use a different replication context (that is already created an initialized), but you will need to change the Destination Pool of the client1.demo.local and server DR backups so they are saved on the other MTree being replicated to the vault (**/data/col1/nve** on prod replicated to **/data/col1/nve-repl** on the vault)

Navigate to **Protection** **--&gt; Policies**.

Click on **Filesystem**

Select **Traditional: backup** and click **Edit**

Select the **Data Movement** tab, and change the destination pool from NW-FS to **Data Domain Default.**

Click **Save**

From the **Polices** page click on **Server Protection** to change the server DR destination pool

This module allows users to run the entire end to end flow of protecting data using NetWorker, replicating the protected data to the vault and analyzing the data using CyberSense. It allows to simulate an infection on the production data and view how CyberSense displays its conclusions and what you can do next.

Module 5 - NetWorker end to end workflow

NetWorker end to end workflow

Recovery Sandbox cleaning from previous module

NetWorker Backup Settings Update

Change the Destination Pool