Data Domain repo and Encryption

[dopamind]

Hi Teams

On a project we have the obligation to encrypt the backup Jobs on the repositories.
The chosen architecture is based on Dell Data Domain appliances.
Knowing that deduplication does not go well with encryption, ( https://helpcenter.veeam.com/docs/backu ... uplication ) , I would have liked to know if the best solution is to enable the encryption feature on the deduplicating storage appliance itself ?

Feedback appreciate
Regards
Thks

Seb

[ronnmartin61]

Correct enabling Veeam encryption is not recommended however you're of course encouraged to leverage native DD encryption. Also note that we also do support in-flight encryption via DDBoost https://helpcenter.veeam.com/docs/backu ... encryption

[dopamind]

Ok so if i resume :
- Activate Inflight encryption in veeam to ensure security on transport mode.
- Activate native encryption on DD to ensure Backup job security.
Right ?

[Andreas Neufert]

If you want to have the backup data encrypted with effective deduplication, then use DD encryption.

If you want to protect the data flow over the network, enable Veeam transport encryption.
You can argue if this is needed as we transport data on image block level and it would be really hard to intercept a whole disk over the network.

[stewsie]

If you are using DD Boost then there is an option on the repo to enable DDBoost encryption