Backup & Replication Enable HSTS

[randymarsh3]

Is there a way to enable HSTS on Veeam Backup and Replication Community Edition? I found this link to enable it on another product:

https://www.veeam.com/kb2376

But I don't see a file like that anywhere on Backup & Replication Free Community Edition.

HSTS is being flagged in our vulnerability scans for this product.

Thanks!

[HannesK]

Hello,
and welcome to the forums.

Just to be sure, because I moved your post to the Backup & Replication (VBR) forum... are you asking for agents, or for Backup & Replication (VM-based backup)?

Community Edition is the same like a "Standard Edition", just limited to 10 workloads. So the settings are the same.

The KB article looks good to me to solve the issue (if it exists. Security scans often have false positives)

Best regards,
Hannes

[randymarsh3]

Hi,

I'm asking for Backup & Replication (VM-based backup). I don't see the file location mentioned in the article on my installation.

Thanks,
Stuart

[veremin]

The KB article talks about Veeam Backup Self-Service Portal - the feature that is not available in Community Edition. Thanks!

[randymarsh3]

When you say that feature is not available in the community edition, do you mean the self-service portal is not available or enabling HSTS is not available? It's HSTS that is being flagged in our security scans so we're trying to find a way to enable that.

Thanks

[veremin]

Self-service portal. Thanks!

[randymarsh3]

Ok thanks for the clarification. My question is still outstanding then and I'll hope somebody chimes in on the forums with how to enable HSTS

[HannesK]

There is no HSTS setting in VBR.

Enterprise Manager could cause the message, as it would require IIS. For IIS Google gives me this as a first hit https://www.server-world.info/en/note?o ... &p=iis&f=6 and it's also covered in the KB article you linked

[randymarsh3]

Ok thank you. I'll let our security team know that this is not possible.