Note: the Symantec backup process backs up EVERYTHING including the
hardware configuration. If you restore the prod box to the backup box it will need to be on the same network segment.
I need to know more about your Disaster Recovery plan to give you more advice, but you miight want to run both boxes, one as Control Center/Scanner and the 2nd as Scanner only. If you loose the CC/Scanner combo, the standalone scanner can run for 72 hours before you start losing data - logs, quarantine, compliance incidents. Mail flow will continue.
You should still backup your CC to another location.