Offline Veeam Threat Hunter Updates: Is a Staging VBR Server Required?

[matsusan]

I'm looking for way to update Veeam Threat Hunter definitions in a completely offline (air-gapped) environment
where using a proxy is not an option.

I have seen community suggestions about using a staging server to get the updated files from the C:\ProgramData\Veeam\Threat Hunter\Engines\ directory.
https://community.veeam.com/vug-south-e ... nter-10822

This leads to my specific questions:
- Is a Veeam Backup & Replication (VBR) installation required on the staging server just to download these definition files?
- If VBR is not mandatory, is there any other way to obtain the latest definition files?

Our goal is to use Threat Hunter effectively within our strict security constraints.

Thanks,
Ryoma

[david.domask]

Hi Matsusan,

On the thread you linked, please see Fabian's post here (user Mildur)

The process is unsupported and currently there is no supported means for offline updates with Veeam Threat Hunter. As noted in the linked post, you can use an HTTP proxy for fetching the updates, but the process listed is unsupported and may stop working in future updates.