Host-based backup of VMware vSphere VMs.
Post Reply
KarmaKuma
Enthusiast
Posts: 53
Liked: 6 times
Joined: Feb 05, 2022 11:16 am
Contact:

Alert on immutability settings change without Veeam One

Post by KarmaKuma »

Is there a way to send/recieve alerts on changes to the immutability settings (enabled/disabled, immutable time) without having Veeam One?

And, of course alerts on changes to alerting settings ;)
Regnor
VeeaMVP
Posts: 1050
Liked: 328 times
Joined: Jan 31, 2011 11:17 am
Full Name: Max
Contact:

Re: Alert on immutability settings change without Veeam One

Post by Regnor »

Well, Veeam ONE would be the perfect solution to this 😉

Changes to repositories create an event.
https://helpcenter.veeam.com/docs/backu ... ml?ver=120
You could create a tasks which sends an email each time this event is logged in Windows.
Or, use the Syslog Integration, and forward all events to a SIEM solution.
KarmaKuma
Enthusiast
Posts: 53
Liked: 6 times
Joined: Feb 05, 2022 11:16 am
Contact:

Re: Alert on immutability settings change without Veeam One

Post by KarmaKuma »

That means Veeam B&R by itself (without external/3rd party tooling) does not offer any solution?
Regnor
VeeaMVP
Posts: 1050
Liked: 328 times
Joined: Jan 31, 2011 11:17 am
Full Name: Max
Contact:

Re: Alert on immutability settings change without Veeam One

Post by Regnor »

That's right, VBR itself doesn't have a built-in notification for those settings. From a security perspective it's better to have an external system monitoring security related events and settings. If a bad actor gains access to your backup and manipulates its configuration, notifications would probably also get disabled or altered.
So whether it's Veeam ONE, a SIEM solution or a regular monitoring software (or a combination), I would recommend to have it separate from VBR.
Post Reply

Who is online

Users browsing this forum: Google [Bot], Semrush [Bot] and 7 guests