Blogs and podcasts

Bring your knowledge and expertise while creating blogs and podcasts

  • 529 Topics
  • 3,976 Comments

529 Topics

regnor
regnorVeeam Legend
posted in Blogs and podcasts

Wasabi: Minimum storage duration policy

You might or might not know this, but Wasabi does have a minimum storage duration policy in place.What's that?Depending on your pricing model, each uploaded object will be billed for a minimum amount of time.Pay-as-you-go customers have 90 days, reserved capacity customers (pre-paid) will have 30 days.If you delete an object before this minimum duration is over, the remaining time will still be charged.You can find more information on this website:https://wasabi-support.zendesk.com/hc/en-us/articles/360058734492-How-does-Wasabi-s-minimum-storage-duration-policy-work-ExampleYou upload 1TB of objects to Wasabi and have the 90 days minimum storage duration policy in place. After a week you decide to delete the whole 1TB.This means you pay for:7 days timed active storage 83 days timed deleted storageCan I recover deleted objects?You might think, that as you pay for deleted objects, you may be able to recover those. Unfortunately this is not the case, so you can’t use this as a recycle bin.

5
regnor
1 month ago
vNote42
vNote42Veeam Legend, Veeam Vanguard
posted in Blogs and podcasts

[Quicktip] Licensing in Veeam Disaster Recovery Orchestrator

Played around with the new version 5 of Veeam's Disaster Recovery Orchestrator (VDRO). I had some troubles with licenses and wanted to share my outcomes.There are a few components that should be taken into account for licensing:Production VBR server VDRO server Embedded VBR server within VDRO serverSome facts here:Production VBR server Can be added to VDRO server. Which will be normally the case for production installations. For PoC, it is not necessary to do so. When adding to VDRO (an agent will be installed), consider the following: You are not allowed to mix trial and NFR keys! So, when your VDRO server runs a trial (or paid) license, a NFR licensed VBR server cannot be added.   https://helpcenter.veeam.com/docs/vdro/userguide/licensed_objects.html?ver=50#licensing-for-standalone-veeam-backup---replication-servers-with-orchestrator-agents VBR server must have Enterprise or Enterprise PLUS edition licensed. VDRO server There are a few licensing types here: https://helpcent

5
Chris.Childerhose
9 months ago
Iams3le
Iams3leVeeam Legend
posted in Blogs and podcasts

Critical Veeam Backup & Replication 9.5 | 10 | 11

There are two critical CVEs that affect Veeam Backup & Replication and account for two of the three critical Veeam Backup & Replication CVEs, and the most serious of the products affected. The Critical Veeam Backup & Replication vulnerability notes include: CVE-2022-26500 | CVE-2022-26501CVE-2022-26500, CVE–2022-26501: These two CVEs relate to Veeam Backup & Replication allow executing malicious code remotely without authentication. This may lead to gaining control over the target system. This carries a CVSS rating of 9.8 and is classified as Critical.Cause? – The vulnerability is caused by the Veeam Distribution Service, running on TCP 9380 by default, allows unauthenticated users to access internal Veeam API functions. An attacker may send input to the Veeam API which may allow uploading and executing malicious code.It is worth nothing that patches are available for Veeam 11a and 10a as follow11a – Build 11.0.1.1261 P20220302: https://www.veeam.com/kb4245?ad=in-text-l

5
dips
6 months ago
coolsport00
coolsport00Veeam Legend, Veeam Vanguard
posted in Blogs and podcasts

[Quick Tip] Nimble Storage Integration VM Recovery

Just wanted to share a VM recovery tip with you all I recently discovered when needing to recover a VM no longer being processed by a VBR Backup Job it was in due to Deleted VM Maintenance Schedule. To assist with my recovery, you have to be utilizing Storage Integration technology with Veeam. My specific environment uses Nimble Adaptive Flash Arrays, so be sure to understand how your Storage Vendor’s snapshot technology works before assuming my “tip” will apply to your environment. Let’s assume you’re backing up VMs with vSphere Tags and during tag maintenance you mis-apply a tag, or forget to (re) apply a tag to a VM needing to be backed up. Or maybe you use vSphere “containers” to back up your VMs (i.e. Datastores, VM Folders), and you mistakingly move a VM out of the Container and the VM is no longer getting backed up. As a good Backup Admin does, such that you are, you review your VBR jobs daily to verify they succeeded: BOOM! Well done, Backup Admin!   But, you weren’t being as t

5
coolsport00
1 year ago
haslund
haslundMr. VMCE
posted in Blogs and podcasts

#VMCA 2022 Official practice exam question 40 walkthrough

The walkthrough of the official #VMCA 2022 practice exam question 40 is ready.“The one with the final question”. Thank you so much for watching the series. 

5
coolsport00
7 months ago
Nico Losschaert
Nico LosschaertVeeam Legend
posted in Blogs and podcasts

3-2-1-1-0 Golden Backup Rule with VBO365

Hi all I hope you all read my post about the 3-2-1-1-0 golden rule - 3-2-1-1-0 Golden Backup Rule | Veeam Community Resource Hub.Perfect in combination with Veeam Backup & Replication to save your backups as good as possible to protect them against ransomware, hackers, ...But what with Veeam Backup for Office 365 ?There is no built-in option for creating backup copy jobs, so there is by my knowledge no option to copy the backups on your primary repository to a secondary repository.I know, Office 365 is running on high-available infrastructure but in case of ransomware or a hacker on your VBO365 server, all your backups can be deleted. So the rule 3-2-1-1-0 should also be implemented in this case.An option could be : create a second job with the same settings as the primary job except writing to another repository. Then you have a second copy of your O365 data. In my opinion that is not a good solution : twice the network-traffic needed (not ideal if VBO365 is running on-premises an

5
Nico Losschaert
1 year ago
vNote42
vNote42Veeam Legend, Veeam Vanguard
posted in Blogs and podcasts

[Quicktip] Error in Enterprise Manager during Catalog Replication - Meta-file error

The following error can occur in Veeam Enterprise Manger during catalog replication. Catalog replication is needed to transfer guest indexing information from the VBR server to the Enterprise Manager server.By default, replication task runs automatically after each backup job. You can trigger it manually within Enterprise Manager GUI. Just enter the Configuration section, select Settings and press Update Now.Log files can be seen beneath Sessions.Meta-file errorThis error is about the meta-file that does not contain a certain attribute.Cause and solutionThere is a meta-file for catalog replication on Enterprise Manager server. In some situations it may happen that this file is empty. I do not know exactly under what circumstances this can happen but the solution is simple. Just delete, or rename the empty file. File is located on the Enterprise Manager server in directory C:\VBRCatalog\Replication\InConnectors and is named VbrServerName.uuid.con.The next replication task should not sto

5
Chris.Childerhose
7 months ago
wolff.mateus
wolff.mateusVeeam Legend
posted in Blogs and podcasts

New Veeam Best Practices - Cloud Solutions

Now we have a specific best practice for Veeam Backup Cloud Solutions: https://bp.veeam.com/vbcloud/

5
Nico Losschaert
24 days ago
saintdle
saintdleComes here often
posted in Blogs and podcasts

[Blog Post] Kubernetes data protection with Kasten K10 by Veeam - Some blogs and recordings from the community

Recently I’ve been testing and used Kasten K10 by Veeam. The container data management tool from Kasten. I must say I’ve been very impressed with the software and also the releases keep coming with more functionality.Below is the content I’ve posted on this over the past few months, and I’ve even been delighted to ask to present at a number of user groups for this, culminating at a Session for VeeamON! Below are the posts I’ve wrote up.Installing Kasten on; Red Hat OpenShift running ontop of vSphere Tanzu Kubernetes Grid Configuring Kasten backup policies, protecting data and restoring data How to upgrade your Kasten environment Kubestr – Open-Source Kubernetes Storage benchmarking tool  VMware User Group Recording - Protecting your Tanzu Kubernetes Workload with Kasten by Veeam I am more focused on the VMware Tanzu of the side of the house for what I’ve learned, but more than happy for feedback, and to answer any questions.

5
Geoff Burke
1 year ago
haslund
haslundMr. VMCE
posted in Blogs and podcasts

#VMCA 2022 Official practice exam question 01 walkthrough

The walkthrough of the official #VMCA 2022 practice exam question 01 is ready. 

5
regnor
8 months ago
marcofabbri
marcofabbriVeeam Legend
posted in Blogs and podcasts

VMCA 2022 Official Prep FULL Guide

I created this topic to put some order to @haslund  20 threads about his fantastic VMCA 2022 Official prep course, so we avoid dispersing information, questions and answers unnecessarily.@Kseniya hope this help our community.Remember to tag @haslund  when you need an official answer and to thank him for all his amazing work, of course :)   Sources of first topic: 

5
Chris.Childerhose
8 months ago
MicoolPaul
MicoolPaulVeeam Legend, Veeam Vanguard
posted in Blogs and podcasts

Microsoft Exchange Server vNext Delayed - New Details Available

In 2020, Microsoft announced the vNext editions of their popular SharePoint, Skype for Business, Project, and Exchange Server applications, due for release in the second half of 2021. However, as of the time of publication, only SharePoint and Project Server Subscription Editions are available.The other products have had their delays greeted with a wall of silence from Microsoft, until now. Whilst there’s still no word on if/when we’ll see Skype for Business Subscription Edition, the Microsoft Exchange team have provided an in-depth breakdown of what’s going on with Exchange Server Subscription Edition, and honestly, I’m impressed with their transparency. The Exchange Team Recommend Exchange Online, and 2019?It should come as no surprise that Microsoft recommend Exchange Online, after all, who knows Exchange better than Microsoft? But in Microsoft’s latest Exchange blog post, we see Microsoft also endorsing Exchange Server 2019 where there is a requirement to not utilise Exchange Onlin

5
dips
3 months ago
haslund
haslundMr. VMCE
posted in Blogs and podcasts

#VMCA 2022 Official practice exam question 21 walkthrough

The walkthrough of the official #VMCA 2022 practice exam question 21 is ready. 

5
Inder
8 months ago
jorge.delacruz
jorge.delacruzCommunity Manager
posted in Blogs and podcasts

Enhanced HTML Reporting - Veeam Backup for AWS, Azure, and Office 365

Greetings everyone, for years we all have been configuring our SMTP notifications on Veeam Backup and Replication to start receiving emails about the jobs, etc. Probably is the second or third thing we do after installing VBR.Now, that is great, but at the same time is true that Veeam Backup for AWS/Azure/Office 365 SMTP Notifications are not the same as what we are used in VBR, until today!I am pleased to share here with you, some Community work I have built using the comprehensive, feature-rich, RESTful API these products include, keen to hear your feedback. The how-to of every script it is something similar to this:We have our products which exposes RESTful API We have a bash shell script to collect data from the API The bash shell script sends the data to the specified address, or addressesThis post might be a bit long, so keep scrolling to the HTML Report you need.Enhanced HTML Report for Veeam Backup for AWSThis Script will query the Veeam Backup for AWS API and save the job sess

5
jorge.delacruz
1 year ago
MicoolPaul
MicoolPaulVeeam Legend, Veeam Vanguard
posted in Blogs and podcasts

Data Protection Best Practice: Encrypting Backups

Today I want to talk about backups, and the importance of encrypting them, everywhere. When people think of encrypted backups, the usual first thoughts are around portable backups such as tape and USB or backups outside of your trust domain such as cloud storage.This is a great starting point, and if you’re not currently encrypting these I urge you to do so as these are normally your highest risk backups. But here’s a an emerging scenario to consider.Security is a constant battle of escalations, attempting to out-do the efforts of each other. Whilst we’re seeing an industry reacting to ransomware threats with immutability, these malicious actors have also moved on from just encrypting your data. Now these bad actors are attempting to steal your data and extort a ransom to prevent leaking the data.Scary stuff right? It’s for this reason and more that backups are being targeted for data exfiltration. Consider the positives a good backup meets. Storage and Bandwidth Efficiency Now malicio

5
regnor
1 year ago
Iams3le
Iams3leVeeam Legend
posted in Blogs and podcasts

PetitPotam attack on Active Directory Certificate Services: How to mitigate NTLM Relay PetitPotam attacks on AD CS

Recently, Lionel Gilles, a French-based Offensive Computer Security researcher based in Paris, France published a PoC tool on NTLM Relay Attack known as PetitPotam that exploits the MS-EFSRPC (Encrypting File Services Remote Protocol). PetitPotam is a classic NTLM Relay Attack, and such attacks have been previously documented by Microsoft along with numerous mitigation options to protect users. Here is an example of such documents: NT LAN Manager: How to prevent NTLM credentials from being sent to remote servers. Below are some related guides: Active Directory Authentication methods: How do Kerberos and NTLM work? how does cached domain logon work?, and What is Pass the Hash Attack and how to mitigate the attack. PetitPotam takes advantage of servers where the Active Directory Certificate Services (AD CS) is not configured with protections for NTLM Relay Attacks. The mitigations below outline to customers how to protect their AD CS servers from such attacks and help in mitigating the W

5
Inder
1 year ago
Rick Vanover
Rick VanoverRICKATRON
posted in Blogs and podcasts

What is your BEST SysAdmin Story - I will feature it Friday!

This Friday - I am presenting on SysAdmin Day 2022 with Sagi Brody - one of the Veeam Vanguards.But I need YOUR HELP - What is your best SysAdmin Story? I will feature it on the show and stream. Tell me a good one - I’ll share it! You can join the show to see if your session is featured also! This Friday at 11:00 AM New York time, Sagi and I will be LIVE on 4 Veeam social feeds (LinkedIn, Facebook, YouTube and Twitter) with a special stream. Join us on the LinkedIN feed here.I have a story that, for now, I will only refer to as “The Coworker” and Sagi will share his best SysAdmin Day story as well.But what is your best SysAdmin Day story? Do you have a save the day moment? What about those pesky dev is actually production situations? Believe it or not - the SysAdmins are still heroes. I would love to hear your stories and any appreciation story to go with it.Speaking of appreciation…. Veeam’s celebration of SysAdmin Day puts some prizes on the line. We are doing a lucky draw where you

5
Geoff Burke
1 month ago
wesmrt
wesmrtComes here often
posted in Blogs and podcasts

Restoring Backups to AWS

Hey guys! Recently I write a blog post about restoring backups to AWS. I normally write in brazilian portuguese but I thought will be a good content to translate and send here too. Like a say, I will detail all the pre-requisites and scenarios to restore backups to AWS using Veeam.This can be useful in three scenarios:Restore your on-premises environment directly to EC2 machines on Amazon. Migrate your on-premises environment to AWS. Create a test environment of your on-premises infrastructure on AWS to validate patching, for example. Pre-requisites As always it is important that we understand the prerequisites of the solution. And in this case we are still involving a solution external to Veeam, which is AWS. Supported backup types  First, we have the supported Veeam backup types for restoring to AWS. Are they: Backups of vSphere or vCoud Director VMs created by Veeam Backup & Replication. Hyper-V VM backups created by Veeam Backup & Replication. Backup VMs and physical machin

5
wesmrt
7 months ago
vNote42
vNote42Veeam Legend, Veeam Vanguard
posted in Blogs and podcasts

[Quicktip] Overwrite Guest processing when VMs selected by vSphere Tags

Probably the following is widely known. But I did not know up to now and found out today. Maybe it is new for others too.After the Upgrade to v10, suddenly Linux VMs are not getting backed up any more, because defined guest interaction user was domain-based and could therefore not login into Linux VM. So solution would simply be to disable guest processing for this VM. Problem was, VMs were selected by vSphere Tags for this job. Fortunately solution is quite simple:Edit the job and got to Guest Processing and  click Application Here you can see the selected vSphere Tag. When you edit this line, options are set for all VMs this Tag was assigned to. Press Add → VMs and Tags → expand Tag of choice → select exception VM   Select new line and press Edit Set option as desired for this/these VM(s) That's it! This also works for custom Guest OS Credentials: BTW: If you suffer from the same behavior after upgrading to v10 (and probably to v11 as well): Curiously this is not a bug, it is a bu

5
vNote42
1 year ago
JMeixner
JMeixnerVeeam Legend
posted in Blogs and podcasts

Backup of Windows 10 PC with server-managed Agent

Hello community,I don’t know if this is common knowledge (I guess all the hardcore Windows Admins hanging around here know this), but I think I share this, nevertheless.I have tried to back up a Windows 10 PC with a server managed VEEAM agent for the first time today (up to now there were Windows Server only). In this environment is no Windows Domain present, local users on all systems only.When I tried to connect to the Windows 10 PC from my VEEAM Server to create a managed server the connection was refused. No specific error message, it just failed… OK, I tried to ping the PC and to connect to it, all ok. Then I tried an administrative share and it failed, too. So, it seems not to be a VEEAM Problem, but a Windows problem…I did some internet research and found that the Windows administrative shares are not accessible by local accounts over the network since Windows Vista. OK, this is some time, but… when do you do such a thing?After some more reading I finally found the solution. You

5
falkob
1 year ago
Nico Losschaert
Nico LosschaertVeeam Legend
posted in Blogs and podcasts

Veeam Backup for Microsoft Office 365 5b cumulative patch KB4158

Hi all Since yesterday there is a new patch available for VBO365.A couple of smaller issues that has been resolved with installing this patch.KB4158: Veeam Backup for Microsoft Office 365 5b cumulative patch KB4158  regardsNico

5
ashanpro
1 year ago
vNote42
vNote42Veeam Legend, Veeam Vanguard
posted in Blogs and podcasts

Monitor backup encryption with Veeam ONE v11a

Here I am talking about backup encryption, which is performed by Veeam. Not by a hacker. It is a good idea to enable this feature.Why to monitor this? A attacker could enable backup encryption or change existing encryption key without being noticed. If so, backup jobs continue to run without any problem. But you are not able to use them for restore because you simple cannot decrypt them! For monitoring encryption password changes reports Backup Objects Change Tracking and Backup Infrastructure Audit can be used. With this reports you see when encryption password was created or modified.To control if somebody selected another encryption password from the list, use the report Job Configuration Change Tracking. For more information see my full feature blog post here: https://vnote42.net/2022/02/09/monitor-hardened-repository-with-veeam-one-v11a/

5
jos.maliepaard
6 months ago
JMeixner
JMeixnerVeeam Legend
posted in Blogs and podcasts

vSphere ESXi 7.x will be the final release supporting Apple Mac platforms

VMware has announced on August 3rd that vSphere ESXi 7.x is the last version supporting Apple Mac platform.https://kb.vmware.com/s/article/88698Reasom is that Apple is moving away from the x86 processor platform.With 7.0 the MacOS platform will be supported until EOL. Guest OS support for Mac is discontinued, too.  macOS guest operating system may only be operated in VMs on vSphere ESXi hosts installed on Apple Mac hardwarehttps://kb.vmware.com/s/article/2015161

5
JMeixner
1 month ago
Geoff Burke
Geoff BurkeVeeam Legend, Veeam Vanguard
posted in Blogs and podcasts

NKGG decides to dump AUTH0 and leverage a home grown Keycloak deployment for Kasten Authentication

Big News compliance Junkies have taken over NKGG’s and JuniorJoe’s company!!NKGG’s and JuniorJoe’s company was grabbed in a hostile takeover. A group of venture compliance junkies are now at the helm. The firm is now call Drdisasters.com. They specialize in taking DR testing to the limit so that it conforms completely with a compliance junkie’s dream, that is, Drdisasters.com will test your DR Plan by creating real life DR situations for your company. The next time an auditor asks, “how sure are you that the DR plan will work?” you can answer well we burned down our server room and implemented our DR plan and it worked wonderfully!!Now more than ever NKGG had to finalize his Kasten authorization setup. Come audit time the compliance gang would surely drill him on every aspect and he needed full control. Time to ditch the external authentication service and create his own.After some research he decided on using keycloak and the bitnami helm chart: https://bitnami.com/stack/keycloak/helm

5
Inder
1 year ago
vNote42
vNote42Veeam Legend, Veeam Vanguard
posted in Blogs and podcasts

What else is new in Veeam B&R v10 (PowerShell snapin)

When creating or changing SureBackup settings using the Veeam PowerShell Snapin, not all options were provided by the Snapin. For example startup timeout could not be set by PowerShell. Fortunately this is now possible with v10-Snapin. See the picture for details: New Option in v10 Snapin        

4
vNote42
1 year ago

Badge winners

  • Veeam University Freshman
    Roy T.has earned the badge Veeam University Freshman
  • Veeam University Freshman
    syedmahdialihas earned the badge Veeam University Freshman
  • Veeam University Freshman
    JAMcIntyrehas earned the badge Veeam University Freshman
  • Veeam University Freshman
    kenluhas earned the badge Veeam University Freshman
  • Veeam University Freshman
    kenashhas earned the badge Veeam University Freshman
Show all badges
Terms & Conditions