# Solution overview

**Xopero Unified Protection includes an AirGap solution designed to enhance data security. This functionality is based on the physical isolation of the backup repository from the network, helping to minimize the risk of data breaches, for example those caused by ransomware attacks. The AirGap architecture ensures that backup data remains inaccessible to entities operating within a compromised IT environment. By combining strict access control with automated backup processes, the solution increases infrastructure resilience and provides a foundation for a secure disaster recovery strategy.**

***

## General information

The **Xopero AirGap** solution is a data protection method that uses xSAIR (Secure AirGap Immutable Repository) technology to create an isolated backup environment and store an additional backup copy fully separated from the primary network.

**AirGap** is based on a cluster of two **Xopero Unified Protection** (**XUP**) appliances connected in a back-to-back configuration, where the second, redundant device remains disconnected from the network most of the time, preventing any communication with it. **The redundant device is powered on only for replication purposes.**

The replication process is initiated by powering on the inactive **XUP** appliance via **iDRAC** (**Integrated Dell Remote Access Controller**). After data transfer is completed, the system automatically powers the device off, restoring the isolated **AirGap** state. Due to its physical disconnection from the network, the backup copy stored on the isolated device remains inaccessible to cyber threats, providing effective protection against ransomware attacks.

***

## AirGap solution characteristics

The **AirGap** system is based on communication between two interconnected **XUP** devices — offline and online:

1. **XUP** offline device remains powered off most of the time. It includes only data storage and, optionally, a backup agent. The device is equipped with an active **iDRAC** interface used for remote startup and shutdown.
2. **XUP** online device can operate in one of two variants:
   1. Standard — includes an active management interface, a backup agent, and data storage.
   2. Limited — does not include the management interface; it contains only the backup agent and data storage.

{% hint style="info" %}
The **XUP** online device plays a primary role in the communication process, as it is responsible for managing the power state of the **XUP** offline unit.
{% endhint %}

***

## Connection architecture and replication process

The **AirGap** data replication process is fully automated, eliminating the need for manual intervention to maintain physical separation of resources. The system manages the connection state of the backup repository, enabling access only during data transfer and isolating it immediately afterward.

### <mark style="background-color:blue;">Component configuration</mark>

The **AirGap** component integration process follows these principles:

1. The **XUP** online unit connects its backup agent and data storage to the management service (hosted on a **XUP** device, external server, or SaaS).
2. The data storage of the **XUP** offline unit is then connected to the management service via backup agent installed on the **XUP** online device.
3. Data replication is performed through a task executed by the backup agent on the **XUP** online device.

### <mark style="background-color:blue;">Power automation (PRE/POST scripts)</mark>

To ensure unattended communication with the offline device, the process uses event-driven scripts:

1. PRE script — executed before the data replication process begins. It powers on the **XUP** offline unit via the **iDRAC** interface and waits until it is fully operational.
2. POST script — executed immediately after the replication task is completed. It safely powers off the **XUP** offline unit using the **iDRAC** interface.


---

# Agent Instructions: Querying This Documentation

If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://helpcenter.xopero.com/xopero-one-en/xopero-unified-protection/xopero-airgap/solution-overview.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.