Discussions specific to the VMware vSphere hypervisor
Post Reply
pufferdude
Expert
Posts: 198
Liked: 12 times
Joined: Jul 02, 2009 8:26 pm
Full Name: Jim
Contact:

Disable Veeam Distribution Service permanently?

Post by pufferdude »

Regarding the recent vulnerability detailed here https://www.veeam.com/kb4288 the temporary workaround until you can patch is to disable the Veeam Distribution Service.

My question is: If I'm not using Veeam agents to back up physical hosts in any way, and don't plan to, can I just leave this service disabled permanently? Or do some other parts of Veeam also rely on it?

I'm on a quest to harden my Veeam B&R primary server/repo as much as practical given our crazy ransomware climate, and having a inbound port open on the server that I will never take advantage of seems stupid... IF there are no negative consequences I'm unaware of. Thus this question.

PetrM
Veeam Software
Posts: 2442
Liked: 393 times
Joined: Aug 28, 2013 8:23 am
Full Name: Petr Makarov
Location: Prague, Czech Republic
Contact:

Re: Disable Veeam Distribution Service permanently?

Post by PetrM »

Hi Jim,

You should not face any issues after disabling Veeam Distribution Service as long as you don't use agent-based backup to protect any of your workloads.

Thanks!

pufferdude
Expert
Posts: 198
Liked: 12 times
Joined: Jul 02, 2009 8:26 pm
Full Name: Jim
Contact:

Re: Disable Veeam Distribution Service permanently?

Post by pufferdude » 1 person likes this post

Great, thanks for the sanity check!

doktornotor
Enthusiast
Posts: 41
Liked: 17 times
Joined: Mar 07, 2018 12:57 pm
Contact:

Re: Disable Veeam Distribution Service permanently?

Post by doktornotor » 1 person likes this post

Is there some doc about disabling services? E.g., for people who don't have any use for those cloud things (Azure, AWS, Google) - safe to disable?

veremin
Product Manager
Posts: 19814
Liked: 2124 times
Joined: Oct 26, 2012 3:28 pm
Full Name: Vladimir Eremin
Contact:

Re: Disable Veeam Distribution Service permanently?

Post by veremin » 1 person likes this post

Correct, you can disable these services completely, if you are not interested in integration with Veeam Backup for AWS, Veeam Backup for Microsoft Azure or Veeam Backup for Google Cloud Platform.

Currently we don't have any documentation that matches product-specific features with corresponding system services.

Thanks!

DaKernel
Enthusiast
Posts: 28
Liked: 3 times
Joined: Dec 10, 2019 5:37 pm
Full Name: Larry Heintz
Contact:

Re: Disable Veeam Distribution Service permanently?

Post by DaKernel »

Hi Veremin,

We can also disable the Veeam Cloud Connect Service service as well if we are not using any of the above mentioned cloud backups? Just want to make sure so I don't muck anything up :)

Larry

Gostev
SVP, Product Management
Posts: 30015
Liked: 5931 times
Joined: Jan 01, 2006 1:01 am
Location: Baar, Switzerland
Contact:

Re: Disable Veeam Distribution Service permanently?

Post by Gostev » 1 person likes this post

You should be fine but please note we don't test our product in such configurations (certain set of services disabled). In the worst case scenario, you can always enable it back!

wishr
Expert
Posts: 3077
Liked: 450 times
Joined: Aug 07, 2018 3:11 pm
Full Name: Fedor Maslov
Contact:

Re: Disable Veeam Distribution Service permanently?

Post by wishr » 1 person likes this post

Hi Larry,

If you are not using Cloud Connect infrastructure, you may disable this service.

Thanks

DaKernel
Enthusiast
Posts: 28
Liked: 3 times
Joined: Dec 10, 2019 5:37 pm
Full Name: Larry Heintz
Contact:

Re: Disable Veeam Distribution Service permanently?

Post by DaKernel » 1 person likes this post

@wishr and @Gostev, Thank you both for the fast replies! Have an awesome day!

Larry

Post Reply

Who is online

Users browsing this forum: No registered users and 21 guests