how to prevent auto-update when backup is running

[Dalius]

Not sure whether it is intentional or a simple bug, but Veeam B&R performs automatic software update when job is running and thus canceling that job. I can not call this behaviour as sane. How to prevent auto-update when backup job is running?
Veeam Linux Appliance v 13.1.1.18

[david.domask]

Hi Dalius,

By default, if the Compliance Deadline has been reached, updates will trigger regardless.

Many job types run non-stop so there is never really a time when "all jobs are stopped", so best practice is to either set the Compliance Deadline time outside of the backup window, or to manually apply the updates during a maintenance window prior to the compliance deadline.

[Dalius]

Backup copy jobs runs non-stop, but mostly waits for next backups. In my case it was a backup to tape job, which runs on weekends, because of the size of the backup. And because of this Veeam's bug-on-purpose it was terminated and left my company vulnerable. I see terminating backup job of this type as a Veeam bug. Veeam should stop behaving like Microsoft and stop treating it's customers like children - we are IT, not ordinary users. it. If we decide update is needed - we perform update when there is oportunity. Not other way around. As a workaround (until this bug is fixed) I will disable Veeam B&R access to internet on day-to-day operation.

[david.domask]

Hi Dalius,

The request is noted, but as mentioned above, you can set the compliance deadline out and attend to updates as you see fit, but once the compliance deadline is reached updates must be applied. This is in accordance with DISA-STIG guidelines to enforce update compliance, and we offer greater flexibility than the guidelines.

Your solution is of course feasible, and in an upcoming release we will have full support for completely offline updates on the Software Appliance, so if that is your preference, it will work just fine and it's a common / sensible scenario to have the backup environment completely isolated from the Internet.

[TonioRoffo]

This is in accordance with DISA-STIG guidelines to enforce update compliance, and we offer greater flexibility than the guidelines.

Not all of us are living in the U.S.A. - Enforcing updates like this, is really, really bad.

[david.domask]

Understood, but the Software Appliance was specifically designed around such specifications; it's not really about location, it's about ensuring those specifications.

Anyways, as already told, the request is noted