Feature Request: Direct Download for Threat Hunter Signatures

[matsusan]

1. Background
To get new signatures for Threat Hunter, the Veeam server needs to connect to the internet.
But most of our customers, like government offices, have servers that must stay completely offline for security required from the government.
We know there is an "offline" update method(*), but it doesn't work for our customers. That method still needs a second Veeam server that can go online, and our customers don't have one. And the method looks for only Windows infrastructures.

(*) Offline Update Veeam Threat Hunter | Veeam Community Resource Hubhttps://community.veeam.com/vug-south-e ... nter-10822

2. The Request
Our request is simple: Please give us a direct download link for the Threat Hunter update files.
If we had a link, we could use a separate, safe computer to download the files. Then, we could copy them over to the offline Veeam server.
This fix would solve the problem and would mean the main Veeam server never has to connect to the internet.

[HannesK]

Hello,
we understand the problem, but there are legal reasons that prevent us from offering any offline updates for Veeam Threat Hunter.

Best regards
Hannes

[matsusan]

Hello Hannes,

Would it be possible to provide the update files for Threat Hunter individually, for instance, through a partner portal?

Best regards,
Ryoma

[HannesK]

Hello,
a partner portal would have the same legal issue... it's about the end user license that is checked during update. We only provide Veeam Threat Hunter to customers with an active subscription.

Even if it was possible, how useful is that? I mean, the idea of Veeam Threat Hunter is to have a "second opinion" vs. the anti-virus product that is used in production. The signatures for all anti-virus products (including Veeam Threat Hunter) today are updated multiple times per day. Would anyone do that manually all the time?

Best regards
Hannes

[Stabz]

Hello,
is there a way to use Veeam Threat Hunter in a Dark Site.

Customer environment is secure and has limited Internet access for all production server. Not allowed Internet access for Veeam Backup Server.

Veeam Threat Hunter checks updates for malware signatures before running the scan so when I try to use it I get an error.

In the case Internet is mandatory do you plan to implement an offline mode with the possibility to update manually the signatures

Thanks

[david.domask]

Hi Stabz,

I've merged your topic with an existing topic on the same subject. Please see the answers above, regrettably there are non-technical reasons why we don't have this at this time.

[Stabz]

Hello David,

Thanks, sorry I didn't see this topic. Ok that's too bad, I have the same problem than Ryoma. I don't want to use a workaround with a non official procedure.

My idea was to manually update the VTH signature only when necessary.