CAPTOR SFTP Backups to Microsoft Azure Blob Storage
Josh Bohls
One of our great partners in New Zealand, Spark NZ, had a customer who wanted to have sensitive employee media content copied to Azure Blob Storage, and enforce policies so that they can ensure that if there was a breach the server and content would not be compromise.
The partner was able to provide the solution using CAPTOR for Intune. Here is the solution, in their own words.
I successfully managed to establish a successful connection to Azure Blob Storage with multiple files using CAPTOR. This was via SFTP. This is a pretty good use case, as Blob storage has way more native processing, backup, AV scanning etc. Another benefit was I was able to succeed using only List and Create permissions.
Which means the account could:
List out files and folders (to check whether the correct folder structure exists)
Create new files and directories if required
And that it can not:
Modify existing files or folders once created (no ability to edit)
Remove/Delete files or folders
Read file contents which have been uploaded
i.e. If someone were to compromise the credentials of this account, they can only upload files and create directories (and again, if you tie this to the AV scanning, you’re minimizing risk of compromise).
If your organization has a similar use case in mind, contact us today to see a demo or set up a free trial.