Backup Second Copy

[parvez_khp]

The first copy of my virtual machine backup storing in the NAS repository and I am planning to take another copy of same virtual machine backup in hardened repository. what should be the best method to take second copy of the same backup.

[Mildur]

Hi Parvez

Welcome to the forum.
Please have a look at our backup copy jobs:
https://helpcenter.veeam.com/docs/backu ... ml?ver=120

Backup Copy Jobs will create a copy of your primary backup and store it on a second repository.

Best,
Fabian

[parvez_khp]

if I am copying existing backup to the Linux immutable repository by running copy job, is there any important settings that needed to be configured.?

[Mildur]

You only need to make sure to enable GFS backups in the backup copy job settings to have immutable backups. Without regular full backups, backup files won't be immutable.
https://helpcenter.veeam.com/docs/backu ... ml?ver=120

For the backup job, there are no specific settings to consider.

For the hardened repository, there are no special settings to consider regarding backup copy jobs.
You only need to make sure that it's correctly hardened, or it's easy for an attacker to delete backups on it:
- No VM for the hardened repository. Use a dedicated physical machine with locally attached disks.
- SSH and all remote management access disabled
- Control and protect physical access to the hardened repository server

We have blog articles from Hannes Kasparick about our hardened repository:
- https://www.veeam.com/blog/hardened-lin ... tices.html
- https://www.veeam.com/blog/installing-u ... itory.html
- https://www.veeam.com/blog/securing-har ... tacks.html
- https://www.veeam.com/blog/ubuntu-linux ... -user.html

We also provide a hardending script and a ISO for easy installation of a hardened repository:
- https://www.veeam.com/sys507
- https://community.veeam.com/blogs-and-p ... eamon-4808

Best,
Fabian

[parvez_khp]

Dear Fabian,

Thanks for your quick response, really appreciated. If I would like to restore my backups from the hardened repositories, what would be the best practices? If you can share any documents links.

Thanks a lot in advance.

[Mildur]

Hello Parvez

You're welcome.
Restore from a hardened repository works exactly the same as from every other repository type.
For some restore options (guest OS file, application item level) a mount server is required. A hardened repository/linux server cannot be the mount server. Therefore most likely your backup server is your mount server (configurable in the repository settings). Every windows machine added as a managed machine can be configured as the mount server. Make sure that there is a stable and fast connection between the backup server and hardened repository.

Best,
Fabian

[parvez_khp]

Dear Fabian,

Thank you for your prompt reply. Just to clarify, the backups stored in the hardened repository will remain immutable and locked, so it will not impact the restore?

[Mildur]

Yes, correct.
It won't impact the restore. We only need to read the backup files when doing a restore.

Best,
Fabian

[parvez_khp]

Okay, alright, thanks for clearing up all the doubts. Really appreciated.