Offline SOBR

[TomDeSchutter]

Hello

Having no knowledged colleagues to consult, I'm relying on your experiences. Our current setup has its backup on NAS n°1 with a backup copy on SOBR (NAS nrs 2, 3 and 4). All Veeam components are outside of the AD domain, firewalled and hardened to the point I feel somewhat confident (fully aware there will always be a gap and a potential breach). Surebackups every saturday. Has been working perfect.

Now, ransomware in mind, I had the idea to take the SOBR offline while not in use. Easily done, script to take the targets offline via diskpart pre- and post-backup. However, a backup-copy job doesn't do pre- and post- as the job runs continuously while waiting for new data to appear. The idea was to drop the backup-copy job and have a standard backup job on storage I can get offline, as I would be able to trigger pre- and post-commands. I would then run this job once a week vs every day, say during the time it takes to run my SureBackups from the primary repo. Having an offline copy has a priority over having a duplicate set. The frequency of the offline backups can be lower as that backup set would become a last-resort in case of contamination of the primary. Making a cloud copy isn't an option (for now).

Now it's a two-step question: can it be done and more importantly is it a good idea?

Thx

--Tom

[foggy]

Hi Tom, backup copy job also has pre- and post-job scripts. The latter triggers after all the data transfer tasks complete (unless there are pending tasks, in which case it waits for the interval expiration). Thanks!

[TomDeSchutter]

Thx foggy. My Backup Copy jobs (re)start after I edit them, and run the pre-job. After the copy it idles and waits for the new restore points to appear. Post jobs aren't triggered as far as I can see.

[foggy]

That would mean there are some pending tasks then. Anyway, your suggested solution with the second set of regular backup jobs will also work.