Best Practice Veeam BR - Hypervisor - NAS

[Bistrol]

Hi,

The infrastructure that I often encounter in clients is the following:

Hypervisor (VMware, Hyper-V) on network A
VEEAM BR on network A
NAS on network A

What's the best practice to isolate NAS and its data from the network A?

Thanks in advance for your advices,

Bis

[Mildur]

Hello Bistrol

Welcome to the forum.
The NAS should use MFA for any administrative login.

But the issue with such flat design is that every administrator on the Veeam B&R server will be able to delete your backups even without having access to the NAS.

Does your customer use immutable or air gapped backup targets?
- Tapes
- Object Storage with immutability
- Linux Hardened repository?

Best,
Fabian