Backup & Data Resilience

Image backup for full system recovery, and file/folder backup for selective protection. They answer different questions and have different restore paths.

Hybrid gives a fast local restore path plus an offsite copy. When a customer says 'we back up to a NAS', the missing half of the sentence is offsite.

File-level recovery, image restore, bare metal recovery, and recovery to virtualization. Bare metal and virtualization are the ones that matter in a real disaster conversation, and they are the ones customers have never tested.

Validating that a backup actually boots is the difference between a job status and a recoverability claim. Make them ask for it by name.

Distinct buckets for us-west-1, us-west-2, us-east-1 and us-east-2. Allowlisting the wrong region breaks backup while everything else keeps working — a uniquely confusing failure.

Not an official source: NinjaOne's canonical allowlist article (ninjarmm.zendesk.com/hc/articles/211406886) requires an authenticated support account and returns HTTP 403 to anonymous requests, so it could not be cited directly. This is a partner's published mirror of that list. Treat the hostnames as a starting point and re-verify inside your own tenant before handing them to a network team.

Device backup protects the endpoint. SaaS backup protects data in platforms like Microsoft 365. They fail for unrelated reasons and should never be described interchangeably.

Backup Job Duration Alert and Backup Job Last Success Threshold Alert make backup health part of the same alerting model as everything else, rather than a separate console someone remembers to check.