Veeam Security - Immutable Storage

[GianlucaCroci]

Good morning,

we're looking the topic of backup security to prevent possible attacks from creating unsolvable problems for us.

We'll configure one or more Immutable Storage in Veeam, but a question arises.

We use a 14 day retention. Therefore, during this time no one can write or delete the saves.

But if someone were to manage to move Veeam's clock forward by two weeks, would all saves be deleted?

Thanks in advance.
Gianluca

[Mildur]

Hi Gianluca

The date and time on the VBR server is irrelevant for the immutability period. The date and time on the storage appliance (Hardened Repository, Object Storage) is important for expiring immutability on backup files.

If time on a VBR server was changed to a future date, backups still cannot be removed by the VBR console.
You have to protect only the storage appliances against such date configuration changes.

Thanks
Fabian

[GianlucaCroci]

Thanks a lot Fabian