This topic applies to the page in XInsight for managed systems running QSM 4.2 or later.

QSeal provides an air-gapped backup mechanism that protects data against ransomware and unauthorized access. During idle periods, it resets the backup target’s network interface IP address to 0.0.0.0, keeping the backup node hidden from the network. Data transfer is initiated by the backup target through a pull-based mechanism and authenticated using designated accounts.

Go to Protection > QSeal to configure and manage QSeal protection. QSeal uses the Source system to define authorized access to protected data and the Target system to create and run backup tasks.

Configure the Source #

Configure authorized users on the source system before creating a backup task on the target system. These credentials allow the target system to connect to the source and pull backup data securely.

Go to Protection > QSeal > Source.

Add an Authorized User #

Create an authorized user and specify the source directories that the account can access.

1. Click Add.
2. Enter the Name and Password.
3. Select the source directories that the account is allowed to access.
4. Click Create.

The account credentials are required when configuring the target backup task.

Remove an Authorized User #

Remove an authorized user when access to the source data is no longer required.

1. Select the user from the list.
2. Click Remove.
3. Review the confirmation message, and then confirm the removal.

Removing an authorized user prevents target tasks that use the account from accessing the source data.

Configure the Target #

Use the Target tab to create and manage QSeal backup tasks on the destination system.

Go to Protection > QSeal > Target.

Create a Backup Task #

Create a QSeal task to pull modified data blocks from the source system to the backup target.

1. Click Create Task.
2. Configure the following settings:
   • Name: Enter a name for the task.
   • Target Network Settings: Select the interface and configure the IP address, netmask, and gateway used while the task is running.
   • Connecting to Source: Enter the source IP address, port, username, and password, and then click Connect to verify the connection and credentials.
3. Click Next.
4. Under Settings, configure the backup folder path and optional schedule.
5. Click Next.
6. On the Ready to Complete page, review the configuration.
7. Click Finish to create the task.

Run a Backup Task #

Run a QSeal task manually to establish the temporary network connection and pull data from the source.

1. Select the target task from the list.
2. Click Run.

Restore from the Latest Backup #

Restore the protected data to the version from the latest completed backup.

1. Select the completed backup task.
2. Click Restore.
3. Review the confirmation message, and then confirm the restore operation.

QSeal restores the data from the latest backup version.