Comprehensive data protection for all workloads
Post Reply
gdemanuele
Lurker
Posts: 2
Liked: never
Joined: Jan 07, 2020 12:33 pm
Full Name: Geoffrey Demanuele
Contact:

[ID# 03935062] Switching our secondary backup to NAS

Post by gdemanuele » Jan 07, 2020 1:01 pm

Hi,

Hope this ticket finds you all well and good !

We are currently using a tape infrastructure as a medium for our secondary target backups (Veeam Backup & Replication 9.5 Update 4). This we are considering as an old technology, prompting us with numerous disadvantages from a media point of view, both from financial aspect and from performance aspect, so we have planned to change this to a QNAP NAS based solution (completely eliminating the tapes in our scenario)

We already liaised with Veeam support for any knowledge base articles about the topic (ID 03935062 for reference) and for the sake of collating all information already in hand, am listing them all as follows ...

- https://www.veeambp.com/job_configurati ... p_copy_job
- https://helpcenter.veeam.com/docs/backu ... l?ver=95u4
- https://www.veeam.com/blog/backup-copy- ... -copy.html
- https://helpcenter.veeam.com/docs/backu ... l?ver=95u4
- https://helpcenter.veeam.com/docs/backu ... l?ver=95u4

we would like to ask for any valuable information on how to go about setting the NAS from a Veeam point of view, i.e. setting it up through Backup Infrastructure > Backup Repositories? Scale-Out Repositories? Maximum priority is to be given from security perspective (considering ransomware in the scenario) therefore we would like to know all Veeam's available features that we can use in order to maximise secure connection between out Veeam Server and NAS (in our case QNAP)

Thanks in advance for all information provided

Geoff

Gostev
SVP, Product Management
Posts: 25782
Liked: 3968 times
Joined: Jan 01, 2006 1:01 am
Location: Baar, Switzerland
Contact:

Re: [ID# 03935062] Switching our secondary backup to NAS

Post by Gostev » Jan 07, 2020 1:58 pm

Hello! For ransomware protection, it is critical not to use SMB interface, as almost all ransomware knows to look for SMB shares and encrypt files on them. Instead, use iSCSI interface to mount NAS volume to the backup server, and secure backup server according to standard security best practices (off domain, no RDP access etc.)

gdemanuele
Lurker
Posts: 2
Liked: never
Joined: Jan 07, 2020 12:33 pm
Full Name: Geoffrey Demanuele
Contact:

Re: [ID# 03935062] Switching our secondary backup to NAS

Post by gdemanuele » Jan 13, 2020 9:43 am

Hi Gostev,

Many thanks for your reply. But, from a Veeam point of view, i.e. in its product itself, is there some setup and/or channels that Veeam provides as a secure path for the data? This would be over and above the best security practices that we will apply at a server level on Veeam's backup and replication server and on NAS's server

Thanks once again

Geoff

foggy
Veeam Software
Posts: 18790
Liked: 1650 times
Joined: Jul 11, 2011 10:22 am
Full Name: Alexander Fogelson
Contact:

Re: [ID# 03935062] Switching our secondary backup to NAS

Post by foggy » Jan 13, 2020 3:13 pm

Hi Geoffrey, you may be interested in these articles then:
- Configuring Security Settings
- Data Encryption

Post Reply

Who is online

Users browsing this forum: Andrew@MSFT, restore-helper and 87 guests