To use Honeypot, a new feature available in Object First OOTBI v1.7. You will have to ensure that you have upgraded your OOTBI cluster to version 1.7.79.12311 according to the documentation. See the release Notes, and you will be redirected to the Request form.
Object First Support is exceptional. Their responsiveness and efficiency in addressing issues are second to none. If you require immediate assistance or approval. Reaching out to their support team is highly recommended.
According to Object First, customers running OOTBI versions earlier than 1.5.55.10660 should complete the update using the intermediate patch (ONLY for offline updates and if the customer hasn’t installed version 1.5.55.10660). That is, update Ootbi to version 1.5.54.10596, and then update Ootbi to version 1.7.79.12311
Early detection of Threats Targeting VBR with Object First
Object First has introduced a significant enhancement in version 1.7: the Honeypot feature. This feature enables the deployment of a decoy Veeam Backup & Replication (VBR) environment with just a few clicks. This serves as an early-warning system to detect potential cyber threats targeting your backup infrastructure. To learn more about some Key Benefits and security best practices, please visit “OOTBI Security Best Practices: Enable Honeypot on Object First”.
Offline Upgrade of Object First (OOTBI)
Recently, I discussed how to update OOTBI Cluster via the Web UI and also offline. Here is a prior article I created also on this topic.
Therefore, this section discusses how to perform an office upgrade of OOTBI to v1.7 as this is not made to all customers as of yet. To do this, logon to the Object First Web UI.
On the release note as attached in the first paragraph, click on Download Offline Bundle for v1.7.
In the Request Your Offline Bundle, populate the form with your information. If you want the approval with the speed of light, contact Object First Support
The form will be submitted very shortly. I got a separate email with a download link.
The prerequisite is to ensure that you are running Object First OOTBI (1.5.54.10596). As you can see below, we are already above that and on v1.6. To perform the update, click on “Upload Offline Bundle”.
The upload is in progress
When the upload completes, you will be required to install. Click on install
In progress
Update complete. We are now running v1.7
Enable Honeypot
To enable Honeypot as discussed above, it requires only a few clicks. Navigate to the Settings and then click on the Security tab and select Honeypot.
I am fine using DHCP. You can set the IP statically if you want. Do not forget to save when complete.
That is all - You can now simulates various types of attacks and you will be alerted. See this blog on various security best practices.
This Mimics Veeam Backup & Replication and remote management service and some credits to Marco Escoba who birthed the Honeypot feature (A veeam-decoy project)
