[ID# 03935062] Switching our secondary backup to NAS

[gdemanuele]

Hi,

Hope this ticket finds you all well and good !

We are currently using a tape infrastructure as a medium for our secondary target backups (Veeam Backup & Replication 9.5 Update 4). This we are considering as an old technology, prompting us with numerous disadvantages from a media point of view, both from financial aspect and from performance aspect, so we have planned to change this to a QNAP NAS based solution (completely eliminating the tapes in our scenario)

We already liaised with Veeam support for any knowledge base articles about the topic (ID 03935062 for reference) and for the sake of collating all information already in hand, am listing them all as follows ...

- https://www.veeambp.com/job_configurati ... p_copy_job
- https://helpcenter.veeam.com/docs/backu ... l?ver=95u4
- https://www.veeam.com/blog/backup-copy- ... -copy.html
- https://helpcenter.veeam.com/docs/backu ... l?ver=95u4
- https://helpcenter.veeam.com/docs/backu ... l?ver=95u4

we would like to ask for any valuable information on how to go about setting the NAS from a Veeam point of view, i.e. setting it up through Backup Infrastructure > Backup Repositories? Scale-Out Repositories? Maximum priority is to be given from security perspective (considering ransomware in the scenario) therefore we would like to know all Veeam's available features that we can use in order to maximise secure connection between out Veeam Server and NAS (in our case QNAP)

Thanks in advance for all information provided

Geoff

[Gostev]

Hello! For ransomware protection, it is critical not to use SMB interface, as almost all ransomware knows to look for SMB shares and encrypt files on them. Instead, use iSCSI interface to mount NAS volume to the backup server, and secure backup server according to standard security best practices (off domain, no RDP access etc.)

[gdemanuele]

Hi Gostev,

Many thanks for your reply. But, from a Veeam point of view, i.e. in its product itself, is there some setup and/or channels that Veeam provides as a secure path for the data? This would be over and above the best security practices that we will apply at a server level on Veeam's backup and replication server and on NAS's server

Thanks once again

Geoff

[foggy]

Hi Geoffrey, you may be interested in these articles then:
- Configuring Security Settings
- Data Encryption