I hope you all read my post about the 3-2-1-1-0 golden rule - 3-2-1-1-0 Golden Backup Rule | Veeam Community Resource Hub.
Perfect in combination with Veeam Backup & Replication to save your backups as good as possible to protect them against ransomware, hackers, ...
But what with Veeam Backup for Office 365 ?
There is no built-in option for creating backup copy jobs, so there is by my knowledge no option to copy the backups on your primary repository to a secondary repository.
I know, Office 365 is running on high-available infrastructure but in case of ransomware or a hacker on your VBO365 server, all your backups can be deleted. So the rule 3-2-1-1-0 should also be implemented in this case.
An option could be : create a second job with the same settings as the primary job except writing to another repository. Then you have a second copy of your O365 data. In my opinion that is not a good solution : twice the network-traffic needed (not ideal if VBO365 is running on-premises and not in the public cloud) and is also not protected against malware. Those backups can also easily be deleted like the one on the primary repository.
Another option can be if you are using local storage or iSCSI storage as a repository, using a Veeam agent to backup all drives including your repository and putting that on another repository (Veeam Cloud Connect, VBR repository, ...). But is that ideal??? When the repository is small enough OK, but what if the customer has a lot of TBs of data and is using a long retention…
It’s indeed a solution and probably the best at this moment, but not a perfect or flexible solution I think.
If we are using VBO365 on the public cloud like Azure, we can use of course object storage as repository and if using GRS or so then the data is replicated to another geographically zone, perfect as an offsite backup and protected against a disaster, but protected against ransomware and hackers as an airgapped backup? Nope.
Immutable object storage (used on AWS and WASABI) would be the perfect solution like we can use as an capacity tier with a SOBR in VBR.
I would like to know what you guys are using as a best practice at the moment for implementing the golden backup rule 3-2-1-1-0 in combination with VBO365 and this on-premise and in the public cloud using object-storage.
I my opinion a feature request to Veeam would be : possibility to create backup copy jobs from the primary repository to a secondary repository and the possibility to use immutable object storage like AWS and Wasabi like with VBR.
I’m curious for your feedback ;-)