Best practices for File Share Backup Job on a Linux Hardened Repository

[evets5645]

Hello,

I have installed a hardened Linux repository in my Veeam 12 backup infrastructure.

I have 2 types of backup jobs:
- VM backup
- File share backup

My goal is to define backup policies that can recover all files in case all other backups are compromised.

For the "VM Backup Job":
Incremental: every day
Retention: 14 days
Synthetic backup: every 7 days
Immutability period: 14 days
With this type of backup policy, I always have a synthetic backup + an incremental backup in my 14-day immutability window to restore all VMs.

My question is about the "File Share Backup Job":
If I set the "Keep all file versions from last X days" setting to 7 days.
Period of immutability: 14 days

If I understand correctly, the backup repository includes all files + all versions of all files from the last 7 days.

My question is about the immutability period:
Will a file older than 14 days be protected by the immutability flag ?

What is the best "Backup file share to a hardened Linux repository" policy to ensure that all files of a share can be recovered in case all our other backups are compromised?

Kind regards,

[EShutov]

Hi Paul,

In your configuration, the backup holds seven days' worth of data, and the whole backup will be protected with immutability for 14 days. This means you can restore any file that was present in your share during the past week, including files that haven't been changed since the initial backup. The option "Keep all file versions from last X days" allows you to decide how long you want to retain access to deleted or modified files.

To determine the immutability period, consider how long it would take for you to detect and address a potential threat. If you believe you can identify and resolve the issue within 14 days, then you have chosen the appropriate immutability period.

[evets5645]

Thanks EShutov for this clear and complete answer.