Active-passive disaster recovery architecture spanning primary and DR datacentres with Hyper-V hypervisors, FortiGate firewalls, and Zerto continuous replication. Traffic from three remote offices (Mark Lane, Lloyds of London, Guernsey) routes through virtual FortiGate firewalls protecting segmented workloads including application servers, DMZ, management, Horizon VDI, and thin clients. Zerto Replication Manager maintains real-time VM synchronization between primary and DR sites, enabling sub-minute RPO and near-zero RTO for business continuity. This architecture demonstrates defence-in-depth with network segmentation, redundant firewall pairs, and automated failover capabilities critical for financial services and regulated environments. Fork and customize this diagram on Diagrams.so to model your own multi-site topology, adjust firewall rules, or integrate additional replication targets.