Host-based backup of VMware vSphere VMs.
Post Reply
MatzeB
Veeam Vanguard
Posts: 29
Liked: 8 times
Joined: Jan 04, 2021 7:51 am
Full Name: Matthias Beller
Contact:

Feature Request / Netapp Tamperproof Snapshots

Post by MatzeB » 1 person likes this post

Hello everybody,

for a long time, Netapp has offered a so-called SnapLock license (WORM mode), which was not very useful for integration into backup products, since it was a classic WORM file share. This is probably the reason why SnapLock in Veeam is an unsupported Netapp feature. Since Ontap 9.12.1 there are so called Tamperproof Snapshots, which are protected against deletion. However, this still requires the SnapLock license which the wide range of customers does not have.

This will now change dramatically. Netapp is releasing Ontap One which includes the SnapLock license for ALL customers who had a Premium Bundle, and that is almost all of them. This allows the majority of customers to use Tamperproof Snapshots now.

So I would like to see support for Tamperproof Ontap Snapshots in Veeam as well.

Are there any plans to implement this?

Regards
Matze
foggy
Veeam Software
Posts: 21082
Liked: 2116 times
Joined: Jul 11, 2011 10:22 am
Full Name: Alexander Fogelson
Contact:

Re: Feature Request / Netapp Tamperproof Snapshtos

Post by foggy »

Hi Matthias, we're definitely looking in the direction of storage snapshots immutability. Thanks for your feedback!
MatzeB
Veeam Vanguard
Posts: 29
Liked: 8 times
Joined: Jan 04, 2021 7:51 am
Full Name: Matthias Beller
Contact:

Re: Feature Request / Netapp Tamperproof Snapshtos

Post by MatzeB »

Thanks for the feedback, that sounds good. Any more details or planned release on the topic? I've been asked several times about this.
foggy
Veeam Software
Posts: 21082
Liked: 2116 times
Joined: Jul 11, 2011 10:22 am
Full Name: Alexander Fogelson
Contact:

Re: Feature Request / Netapp Tamperproof Snapshtos

Post by foggy »

No, no other details we could share at this point.
kais3n
Lurker
Posts: 1
Liked: never
Joined: Jul 21, 2023 8:06 pm
Contact:

Re: Feature Request / Netapp Tamperproof Snapshtos

Post by kais3n »

+1 from my side.
andreashochstein
Lurker
Posts: 2
Liked: 1 time
Joined: May 29, 2018 8:58 am
Contact:

Re: Feature Request / Netapp Tamperproof Snapshtos

Post by andreashochstein » 1 person likes this post

+1 from my side.
sandsturm
Veteran
Posts: 282
Liked: 23 times
Joined: Mar 23, 2015 8:30 am
Contact:

Re: Feature Request / Netapp Tamperproof Snapshtos

Post by sandsturm » 1 person likes this post

+1 from my side. I'm really waiting for this to be released :-)
ChristophWeber
Veeam Software
Posts: 136
Liked: 18 times
Joined: Apr 12, 2022 7:23 am
Full Name: Christoph Weber
Contact:

Re: Feature Request / Netapp Tamperproof Snapshtos

Post by ChristophWeber » 1 person likes this post

+1 from my side
OG1
Lurker
Posts: 1
Liked: 1 time
Joined: Jan 19, 2022 4:02 pm
Full Name: Oliver Gill
Contact:

Re: Feature Request / Netapp Tamperproof Snapshtos

Post by OG1 » 1 person likes this post

+1 from my side
hnhn99
Influencer
Posts: 20
Liked: 3 times
Joined: Feb 03, 2017 7:17 am
Full Name: Hakan Hedman
Contact:

Re: Feature Request / Netapp Tamperproof Snapshtos

Post by hnhn99 » 1 person likes this post

+1 from my side
acw.calvinwong
Lurker
Posts: 1
Liked: 1 time
Joined: Dec 27, 2023 6:32 am
Full Name: [ACW] Calvin Wong
Contact:

Re: Feature Request / Netapp Tamperproof Snapshtos

Post by acw.calvinwong » 1 person likes this post

Have this been supported yet?
I am trying to check if we can set the snapshot retention period directly on veeam.

https://docs.netapp.com/us-en/ontap/sna ... ing-policy
Mildur
Product Manager
Posts: 8884
Liked: 2346 times
Joined: May 13, 2017 4:51 pm
Full Name: Fabian K.
Location: Switzerland
Contact:

Re: Feature Request / Netapp Tamperproof Snapshtos

Post by Mildur » 2 people like this post

Hi Calvin

No change in v12.1, but we count your request as +1.

Best,
Fabian
Product Management Analyst @ Veeam Software
erbruening
Service Provider
Posts: 2
Liked: never
Joined: Jan 02, 2024 2:05 pm
Full Name: Eric Brüning
Location: Germany
Contact:

Re: Feature Request / Netapp Tamperproof Snapshots

Post by erbruening »

Hi Fabian,

+10 from a VCSP Partner ;)
We have many customers using Veeam and storing Veeam backup data on NetApp FAS Systems.
It would be a big add value and helps to protect backup data against ransomware, if Veeam could handle the usage of Tamperproof Snapshots.

Regards
Eric
Principal IT Systems Engineer // NCSIE ONTAP, NCSE, NCSE ONTAP Specialist, NCDA, NCTA & NAHSE

https://www.linkedin.com/in/eric-br%C3%BCning-70b160265/
david.sole
Novice
Posts: 3
Liked: never
Joined: Jan 02, 2024 6:23 pm
Full Name: David Solé Pérez
Contact:

Re: Feature Request / Netapp Tamperproof Snapshots

Post by david.sole »

Hi Team,

Interested too on this featrure.

+1

Thanks,
FrancWest
Veteran
Posts: 491
Liked: 94 times
Joined: Sep 17, 2017 3:20 am
Full Name: Franc
Contact:

Re: Feature Request / Netapp Tamperproof Snapshots

Post by FrancWest »

Me too! And also support by VBR when automatic tamperproof snapshots are enabled on the storage system. See veeam-backup-replication-f2/netapp-tamp ... 92089.html
andreas.zeiler
Novice
Posts: 7
Liked: 1 time
Joined: May 31, 2010 8:54 am
Full Name: Andreas Zeiler
Contact:

Re: Feature Request / Netapp Tamperproof Snapshots

Post by andreas.zeiler »

Hello,

we are already using these tamperproof snapshots. Not on the primary repository (ReFS64), but we are replicating backups to a NetApp FAS cifs share, added as cifs repository.
A veeam copy job sends daily updates to this repository (the latest backups from the primary repository).
Since the "original" cifs data can be changed, no problem here in merging backup files, deleting outdated files etc. on the cifs share.
In the background, a daily snapshot of this cifs repository is taken some time after the copy job has finished. This snapshot is tamperproof protected for 7 days.

If there is a ransomware attack, it could cripple=change the data in the cifs repository (new writes), but cannot change the original blocks protected by the tamperproof snapshots. With one click, you would be able to revert to the unchanged backup files.

There is one thing that must be kept in mind: If backup data blocks are automatically deleted when the configured retention period is over, the data still covers disk space due to the latest snapshot, for (here in my example) 7 days. So you might need some more disk space in your volume.
If you are sure to detect the attack immediately, you might reduce the protection for the tamperproof snapshots to a lower number of days.

Kind Regards,
Andi
MatzeB
Veeam Vanguard
Posts: 29
Liked: 8 times
Joined: Jan 04, 2021 7:51 am
Full Name: Matthias Beller
Contact:

Re: Feature Request / Netapp Tamperproof Snapshots

Post by MatzeB »

Hi Andi,
I think the majority here (like me) are talking about tamper proof snapshots on the primary datastore, NOT on the Veeam repository. And this support is unfortunately not available today.
In Veeam, file based repositories like CIFS or NFS are not optimal. If you want a high level of protection here, I recommend a Linux hardened repository with dedicated block storage.

matze
Post Reply

Who is online

Users browsing this forum: Bing [Bot], jsuh and 34 guests