Hardening VBR Server

[musicwallaby]

What else would you do on a non-domain joined VBR 12 server please?

I'm looking at KB4525 and doing the SSL/TLS ciphers but I'm now using a hardened repository for backups so I'm looking a bit more closely at the actual VBR server.

I've read a few guides and they almost all seem to come back to the items in KB4525.

Jas

[Andreas Neufert]

Please check on this one: https://community.veeam.com/cyber-secur ... klist-4255
and a well please let the Security and Compliance analyzer tool run to double check the configuration. https://helpcenter.veeam.com/docs/backu ... ml?ver=120

As well consider the pre-hardened VSA that is available for v13 and the full release in v13.0.1

[musicwallaby]

Thanks Andreas that's good stuff.

Is there any published testing on how the Veeam hardened repo ISO has been tested please?

It's genuine curiosity on my part just how far you guys have taken any testing on what damage a bad guy could do so long as they couldn't get physical access.

[Gostev]

https://www.veeam.com/blog/hardened-rep ... iance.html

[musicwallaby]

Thank you, really appreciate those links, great reads.

Jas