[V13] Recon Scanner

[dali@iae.nl]

Maybe a silly question but double check it here anyway
Have the Recon Scanner running on VBR, Proxy and DC's. Works fine!
Can (and does it add value) Recon Scanner run on the VSA?

[Gostev]

Not a silly question at all.

Recon Scanner is designed for Windows-based backup infrastructure, therefore it will still be applicable to installable V13 software. Also, it remains useful for Windows-based components like mount server (if you are protecting Windows VMs, it is really beneficial to have a Windows-based mount server even when using VSA) and BYO Linux-based components.

Recon Scanner cannot run on VSA nor it can add much value there due to the locked down nature of the appliance. Moreover, I would argue its presence would increase VSA attack surface (just like any other code that needs to be able to communicate with remote systems).

Also as it comes to other backup infrastructure components, with V13 you would normally deploy those using Veeam Infrastructure Appliance (VIA). VIA has the same codebase and the same hardening as VSA, thus same considerations apply also to these VIA-based infrastructure components.

[dali@iae.nl]

Very clear answer, question answered. Thanks.

[thomas.duane]

However the value recon is providing A large customer of mine (Aramark) is that there data security team can login (Recon) and see if any ransomware alerts are going on in VBR without having to log into VBR. Recon is a much cleaner purpose built look at ransomware possible attacks with everything categorized through the MITRE framework.