Blogs and Podcasts

In a world where cyberattacks are becoming increasingly sophisticated, trust in our backups has become a constant concern. Is having immutable backups enough? Is storing them offline sufficient? The reality is that while these are good practices, attackers have evolved and now seek to compromise not only production environments but also backup systems. Therefore, backup security should not be seen as a fixed state but as an ongoing process.Aware of this challenge, Veeam® Software and Sophos have joined forces in a strategic partnership to take backup security to the next level.A Partnership to Protect Critical BackupsOn October 24, 2023, Veeam and Sophos announced their collaboration to enhance enterprise cyber resilience. This integration combines the Veeam Data Platform with Sophos Managed Detection and Response (MDR), providing an additional layer of managed detection and response to protect backups from ransomware attacks.This partnership enables:Real-time threat detection, monitor

I have a lot of jobs that are getting a new naming convention. The old way to do this was remove from the job from the configuration, modify the folder name on the repository, rename the job, rescan the Repo, then map the back files to the job.   I found there is an updated way to do this and is a welcome feature to save time. To go one step further, it is not recommended to use the remove/rescan method due to the fact the files get new identifiers that cause the restore points to be seen as new data by all tape and cloud storage offload jobs.  To test it, lets create a new job.In my case it’s called “___TEST_NAME_CHANGE” to keep it at the top of my screen.  Next, after running a job, we will click “Disk” on the left to make sure there is a backup on the Repository. It’s similar, but it’s not quite the same screen. 😉  Now, return to the Backup page, right click your Backup job, click edit, and lets rename it.   On the Backup Job page you can see it’s been renamed.   On the Disk page w

Sizing for NAS/file share backup can appear difficult initially, but with the help of the unofficial NAS Calculator by Hal Yaman it definitely will be a bit easier.As you can see from the screenshot below you need to know roughly how much source data in TB your file share(s) contain, how many files and directories. In case you are wondering what is primary vs secondary repository? Primary is for your short term retention (newest version) and secondary is for long term retention (older versions than newest).The user guide has some good info on the secondary copy settings.Once you have filled all out, just click the Calculate button to get full sizing for all components:Cache repository File Proxy Primary repository Secondary RepositoryHope this was useful and please do post any questions or comments.

 Extracted from original blog at wcithipster.com on Dec 2 Written By Zane AllynManaging datacenters is no small feat. From ensuring backups are reliable to monitoring virtual environments for potential issues, the demands on IT professionals are relentless. During my time as a Veeam customer and datacenter manager, Veeam One was my go-to tool for maintaining visibility and control. It wasn’t just a monitoring solution; it was an operational ally, helping my team and me proactively address challenges, optimize resources, and deliver consistent performance across our environments.Now, with the release of Veeam One V13, the tool I once relied on extensively has been reimagined to make monitoring and reporting even more intuitive, powerful, and accessible. From a brand-new web interface to advanced features like agent-based data collection and deployment modeling, this latest version raises the bar for what IT teams can achieve. Whether you're managing a sprawling virtual infrastructure or

This is part 2 of the blog series about Veeam Backup for Proxmox, which focuses on backup and restore. Part 1 was about the architecture and setup; in case you’ve missed it, you can find it here: Disclaimer: All information and screenshots in this blog post are based on an early access release. Until the final release changes can and will occur! Restoring/Migrating from VMwareBefore we can start to backup systems running on Proxmox, of course we need to deploy a VM. The first release of Veeam Backup for Proxmox will support cross-platform restore, so I restored an existing Windows Server 2022 system from VMware to Proxmox.The process isn’t much different from other platforms and doesn’t require any special knowledge.   In the storage tab, you need to select the destination storage/datastore and define which type of disk (RAW, QCOW2, VMDK) shall be used.  After the restore completed, I noticed that the BIOS was set to “SeaBIOS” by default. As Windows Server 2022 required UEFI to boot, I

Enhancing Your Veeam Security: Key Features to ActivateVeeam Software’s R&D department has been busy the past year. It has introduced three minor feature releases (V12.1, 12.2, and 12.3), including crucial new security features and updates. If you have just installed V12 or are still on V11 and are planning an upgrade to the latest V12 release (V12.3), you may be overwhelmed by figuring out an “order of importance” for activating features.I suggest to customers moving to V12.3, or are using V12.3 but haven’t implemented any security features yet to turn on the new features in this order: Veeam Hardened repository, MFA, 4-Eyes authorization, Entropy and Indicators of Compromise scanning, and Veeam Threat Hunter. First: Veeam Hardened repositoryThe security of your backup infrastructure should start with and center around Immutable storage.  For Veeam, this is the Veeam Hardened Repository (VHR). The Veeam Hardened Repository is delivered as a bootable ISO. It allows you to create a

Veeam ONE, a part of Veeam Data Platform Advanced and Premium editions, monitors your virtual and data protection environment and alerts you of issues occurring in the data center. Veeam ONE contains around 300 alarms that allow you to monitor events happening in your environment, but even with its out-of-the-box features, you may decide you want to build your own alarms for specific use cases. To do this, first, you will need to decide what ‘type’ of alarm you want to create. Multiple options are available when creating an alarm, it can be based on a backup infrastructure component such as backup servers, backup repositories, backup proxy, or a different component. You also have the added capability of basing the alarm on an object in your virtual environment.   When creating an alarm, you should know what you want the alarm to monitor. This can be based on a task or event, performance, or even in-guest processes or service. To create an alarm, navigate to the Alarm Management view in

Agent For MAC Deployment always via catch-all protection groups•.pkg file for installation•Install with double-click or 3rd party software management solution*•Full Disk Access (FDA) must be allowed in both cases   Full Disk Access:  Manual ConfigurationGo to “Settings –Security & Privacy –Full Disk Access”  Check Profile On MacOS   3 Ways To Connect Agent To VBR  1) Command line (same as Veeam Agent for Linux)  2) Import a Catch-Allconfiguration file; can be done via UI:  3) Use mobile device management to distribute a configuration profile Visibility On VBR Side  Appears in VBR after import of Catch-All configuration Assign backup policies in VBR console IMPORTANT VAM does NOT  back up volumesperform bare metal recoveryperform any sort of application aware backupsave applications settings (unless you specifically select the required files)allow non-admin users to access other users’ datahave local UI to create jobs  

Today’s #VMCE2020 #DailyQuiz walkthrough is ready. How often do you use the VeeamZIP feature? What are your use cases? Has UAC causes you issues when enabling application-aware processing in backup jobs? 

In case you missed it, a while back @tsightler presented an amazing webinar Building SecureLinux Repositories.The main topics covered in the presentation are:Securing the host system Isolating Veeam processes Levaraging snapshots Automated deploymentBONUS! Tom also does a side-by-side comparison of Veeam fastcloning on XFS vs ReFS!While Tom presents top content, I think one of my favorite parts was coverage of the fail2ban tool (at 41:47 timestamp).

These days I saw a strange error that makes every backup failed. I thought this would be interesting to share. SituationThere were a few jobs running each day. From a point in time all jobs failed. Error that was shown in console was: [Error Unhandled exception was thrown during licensing process] I checked licensing of course. All hosts were licensed using perpetual licensing. No instances were licensed separately.SolutionIt turned out to be no license problem at all. What happened was, password of the user that was used for connecting to VMware vCenter was changed. After updating the new password in Veeam Manage Credentials too, everything works fine again.

The Veeam Ready team has published two articles on in the Veeam hardened appliance category for Lenovo servers. With the threat of ransomware and destruction of backup data by hackers. Data protection and prevention is key to keep your data safe. Keeping security top of mind. Please see the article links below. Lenovo ThinkSystem SR630 V3 Lenovo ThinkSystem SR650 V3Thanks,Pete

I am not sure if this has been posted somewhere before but I thought I would post my experience of setting up Linux proxies for our VMware backups and the one issue I ran into. I deployed a couple of Ubuntu 22.04 VMs, as I will be using hot-add for the VM backups. I added them to the VBR server and created a test backup of one VM. First backup attempt and I got this error:Error: Cannot get service content. Soap fault. Temporary failure in name resolution Detail: 'getaddrinfo failed in tcp_connect()', endpoint: 'https://vc.domain.local:443/sdk' SOAP connection is not available. Connection ID: [vc.domain.local]. Failed to create NFC download stream. NFC path: [nfc://conn:vc.domaint.local,nfchost:host-1310340,stg:datastore-1310378@TEST/TEST.vmx]. --tr:Unable to open source file [nfc://conn:vc.domain.local,nfchost:host-1310340,stg: So the key to the problem is “failure in name resolution”. Specifically name resolution from my new Linux proxies. I have run into this kind of problem before f

VBR 12.3 had a pretty big payload across our alliance partners. One of those is the NetApp with the ONTAP SnapDiff API. This is a native change file tracking capability built into the ONTAP OS (differencing engine). This will help customers reduce the amount of time it takes for a NAS backup with changes to complete. This improvement was highly requested by our customers. It is easy to enable when you are adding an “Unstructured Data source” in VBR see link and figure 1 below. Once enabled, you will see messages in the job log on incremental backups figure 2. Please spread the word to your ONTAP customers. This is a v1 version of SnapDiiff more features coming (TBD)😀.Adding Enterprise Storage System as NAS Filer Figure 1 Figure 2Note: There are a few restrictions mentioned in the link above listed below.Native changed files tracking (CFT) is not supported for NetApp ONTAP versions from 9.10.1 to 9.10.1P10. Native changed files tracking (CFT) is not supported for NetApp ONTAP FlexGroup

Veeam Backup for Microsoft 365 v8.1 brings several important updates designed to boost performance, security, and flexibility. This latest release enhances the backup process for Microsoft 365 environments, simplifying data protection for critical services like Exchange Online, SharePoint, OneDrive, and Microsoft Teams. Let’s explore the new features in v8.1 and why they’re essential for businesses.Key Features of Veeam Backup for Microsoft 365 v8.1Proxy Pools for Enhanced Efficiency One of the standout features of Veeam Backup for M365 v8.1 is the new proxy pool functionality. Proxy pools distribute backup processing across multiple proxies, which leads to improved efficiency and faster backup times. This feature is especially beneficial in large environments, as it ensures backup jobs can be processed more effectively, reducing bottlenecks and improving overall performance. Linux Proxy Support With the addition of Linux-based backup proxies, Veeam has introduced more flexibility when

Hi!I would like to share with y’all my initial “hands on” the VBR13 - Linux Based OVAPublishing the entry here, so you dont have to leave the Community Site:-----------------------------------------------------------------------------------------------------------------------I want to share my initial screenshots of the Linux-based Veeam Backup & Replication Server.Tech Preview: VBR on Linux (v13)Private technology preview for Veeam 100, for non-production use only. Let’s get started:As you may know, let’s deploy the OVA in our Vsphere Host:As always, follow the wizard…Select where the VM is going to be storedImportant, LAB, so, Thin Prov.Detailed resume, no worries for the error, is ok! It’s just lab and non-production, remember?Booting and great looking…Easy step, to see the assigned IP address to the VM, quick look into the VM propertiesNow, it is time to open your favorite browser, and call the URL from the VBR IP Address, for the web consoleBoom!Look at this console, beautiful

Organizations our facing evolving cyber threats must adopt advanced solutions to protect their data. Veeam has introduced the Recon Scanner within the Veeam Data Platform to strengthen threat detection and prevention capabilities.Powered by an extensive database of cyber incidents, the Recon Scanner is designed to proactively identify potential cyberattacks before they can affect an organization. Developed by Coveware by Veeam, this tool enables businesses to assess threats more dynamically, allowing them to respond to suspicious behaviors and security breaches with greater precision and speed.Unveiling the Recon Scanner for Veeam Data PlatformWe’re excited to announce the integration of the Coveware by Veeam Recon Scanner into the Veeam Data Platform, enhancing our data resilience capabilities with advanced cybersecurity protection. Developed by Coveware, a leader in cyber-extortion incident response, the Recon Scanner adds a powerful layer of defense, drawing on years of experience i

In today’s landscape of expanding data volumes and increasingly complex IT infrastructures, businesses require more than just a dependable backup solution – they need a system that guarantees rapid recovery, enhances operational resilience, and scales alongside their growth. This is where Veeam Data Vault steps in, providing organizations with a cutting-edge approach to data protection that takes backup strategies to the next level.What is Veeam Data Vault?Veeam Data Vault is an advanced, purpose-built repository designed to help organizations securely store, manage, and protect their backups with enhanced availability, scalability, and resilience. Unlike traditional backup repositories, Veeam Data Vault offers a modern, immutable storage environment, ensuring that backup data is protected from cyber threats, including ransomware, malware, and other malicious attacks. Its immutable nature guarantees that once data is stored, it cannot be altered or deleted, providing an additional laye

There was a very comprehensive forum post https://forums.veeam.com/veeam-backup-replication-f2/deprecated-and-discontinued-features-for-our-2025-release-t97087.html but I want to provide a quick summery of  Changes coming  in V13 (H2 2025) to support planning efforts. As you prepare, it’s advisable to phase out deprecated features and prioritize the removal of discontinued ones.Phasing out underused features allows Veeam to focus resources on areas that provide the most value, enhancing overall product quality. Our goal is to streamline maintenance by removing features that are costly to support, rarely used, or contribute to stability issues.Deprecated FeaturesThe following features will be unavailable in new V13 installations or for newly created jobs, but will remain functional for upgraded installations. These features will be fully removed in V14:Veeam Backup & ReplicationReversed incremental backup mode Retention based on restore points (only time-based retention will be supp

 Hi,I share with you several changes that I have been working on to improve the AsBuiltReport.Veeam.VBR script. Next year I will be working on adding the option to generate the report in other languages besides English!!!!.Here is a short summary:https://techmyth.blog/en/posts/abr-veeam-vbr-0_8_13/Happy Holidays! 

🚀 🆕 Just announced and focused solely on virtualization  🔝ℹ️https://www.redhat.com/en/blog/introducing-red-hat-openshift-virtualization-engine Let me tell you a little about what it is about. Virtualization with OpenShift: Simple and Socket SubscriptionOpenShift Virtualization is the virtualization feature that comes built into all versions of OpenShift, from the most basic to the most complete. If you are looking to migrate from platforms like VMware, OpenShift Virtualization Engine (OVE) is ideal for managing and operating your virtual machines (VMs) with a low-cost subscription.OpenShift Virtualization Engine (OVE) is designed exclusively for virtualization, with a per-socket subscription , it does not include functions to modernize applications or work with containers, which greatly simplifies operations if you only need to focus on virtualization.When you combine it with Kasten K10 , you have a complete solution: in addition to managing your VMs, you can protect them with autom

Hello everyone, In this post, I will cover the steps to configure Single Sign-On in Veeam Backup for AWS and thereby use a user managed by an identity provider instead of using local users in Veeam Backup for AWS, ensuring greater security when accessing the tool.Veeam Backup for AWS supports SSO based on the SAML 2.0 protocol, so any identity provider that uses SAML 2.0 can be used. In this article, I will use Azure AD itself as an identity provider to make it clearer how to perform each step. To start, log in to the Azure portal and go to Enterprise applications:  Click on "New application":  Then choose the option "Create your own application":  Choose a name for the app and choose the third option "Integrate any other application...":   With the app created, go to the "Single sign-on" section and then choose the "SAML" option:  Go back to the Veeam Backup for AWS console and go to the "Identity Provider" section under "Settings":  Download the metadata that we will use in our app i

Veeam GFS Backup:The GFS (Grandfather-Father-Son) backup strategy included in Veeam Backup & Replication software is an optimized method for regular and long-term retention of data. It is important for some companies, especially those in the financial sector, to keep long-term data. With GFS, we can take our Annual, Monthly and Weekly Backups and store these backups for as long as we request.Grandfather-Father-Son Hierarchy:Grandfather: At this level, monthly backups are typically stored. It is used to take a full backup on the first and last day of each month and for long-term storage.Father: This is the level where weekly backups are stored. This level of storage can be achieved by taking a full backup any day of the week.Last: This is the level where daily backups are stored. For example, daily backups are provided by taking a full backup at the end of each day.The Schedule of GFS Backup can be seen in the image below. In the image, it can be seen that Weekly Backup is taken on

Over the last several years Microsoft has been moving into Microsoft 365 with their services. With this migration they have introduced many new features into the eco system to make day to day communication and processes smoother. In this same transition Microsoft has also moved to depreciate legacy technologies for newer features that are purpose built for the ecosystem and modern data communication. We are in the process of what is now the second depreciation cycle of legacy technologies in Microsoft 365. The first being when on-prem services did not make it to the cloud and now with the deprecation of legacy APIs on January 31, 2023. Its important to note that depreciated does not mean these services are nasally going to be shut off but further support by Microsoft and third-party access to these services will also be limited if at all. In this case, services in Microsoft 365 that did not make the cut, by Microsoft, to be coded into the Microsoft Graph API with modern APIs will no lo

Today, I tried to restore a file for the Linux server, it failed and the error message was “Unable to obtain IP address for host ‘ubuntu2310”I check the Log from Restore Session, it show “Failed to mount restore point. Unable to obtain IP addresses for host ubuntu2310”Check the DNS records and it looks good.Ping the host from the VBR Server and it looks good as well.Check the hostname from the Linux server to ensure the hostname. It has no issue.Why Unable to obtain the IP address for help host the ubuntu Linux server? I solved it and the steps are as follows.Run sudo apt update at the Linux Server.Run sudo apt-get install samba at the Linux server.Try to re-run restore steps from the VBR console and the error has gone.