Blogs and Podcasts

Hi! In the recent Veeam Backup & Replication v12.1, Veeam brings many new features and capabilities related to data security and integrations with cybersec tools. One of them is the capability to scan backup files with Yara rules.This is a great feature due to the native flexibility of Yara rules and its wide use in the community.In this demonstration, we will see how to create a simple Yara rule, associate a malicious file with a VM, and obtain uncompromised recovery points through a scan operation. Everything is effortless and intuitive. I hope it is helpful for the community!  

  Sometimes, it is necessary to go back to the basics. After all, we have many protocols and stacks that drive IT solutions. I was rereading my notes from an SNIA training and came across this post from Erik Smith. A good overview of what's under the hood of the various types of implementations and protocols for data storage. This post is a bit old but reflects the many storage classic protocols and integrations. 😀Reference:https://brasstacksblog.typepad.com/brass-tacks/2016/07/storage-protocol-stacks.html

Hi Everyone It’s Ootbi!Ootbi is Everywhere and now at the Hub! Today Ootbi showed up at the Veeam Community Hub. Ootbi took one look and loved it. So many brilliant people posting interesting and helpful topics! Ootbi decided to participate as well and hijacked NKGG’s account! Its ok Ootbi is NKGG’s friend so all good.Remember though in real life never let anyone use your account or credentials anywhere for anything!So who and what is Ootbi? Ootbi stands for Out of the box Immutability! Ransomware is getting worse all the time so you really want Ootbi Everywhere!Why don’t we take our first look at Ootbi?Here is the login screen:Login Screen After logging in we get a cool dashboard with information:DashboardOotbi is simple and intuitive. There are some performance metrics on the bottom of the dashboard:performanceOotbi runs very smoothly but if you ever need to contact support you won’t have to wander around trying to find logs all over the place, Ootbi servers them up for you:Support B

Hi Folks, As always in the world of $$ money people will stretch meanings and at times outright make false statements. There is no point in going after them time and time again. Instead just make sure to read and understand the guidelines provided by the source. Veeam have created a great white paper on Zero Trust in Data Protection. They have spelled things out to make it easy for everyone to understand. You can read it here: https://www.veeam.com/whitepapers/pragmatic-approach-to-implementing-zero-trust_wp.pdfAt the end of the day the goal is to defeat ransomware. So approaches that don’t follow what Veeam have stated means that you are taking more risk. Be very careful as I have seen advertising using the terminology of Zero Trust but describing something that is doing the exact opposite of Zero Trust. Again people can sell what they like, just don’t label something chewing gum if it is in fact asphalt. 

Hi Everyone, So I am being sent on a secret mission and decided to do a video training people how not to look like a Veeam Agent when on secret missions!!  

Frequently I'm ask in how to monitor backup jobs of Veeam externally Veeam servers.I know that we can do this easy with Veeam One. But here I’m going to show you a solution to monitor backup jobs having only a Veeam Backup Server (without VEM or VONE).So, the application I’m talking about is Checkmk. Checkmk is a monitoring software usually used on NOC (Network Operations Center) environments. However, this is an easy tool to deploy and very light to hav in our backup environment. VersionsCheckmk has a free and commercial version:Checkmk Raw Edition (CRE) – Free and 100% Open Source. It even incorporates Nagios into its core. You can use it to monitor entire environments. Support for this release is available through the Checkmk community forum.Checkmk Enterprise Free Edition (CFE) – version already based on the standard edition, with Checkmk Micro Core (CMC), which means that it is no longer based on Nagios and is aimed at small IT environments with a single site and up to 25 monitore

  Hi! This demonstration shows how to use IO Meter, PowerShell scripts, Veeam Backup & Replication, and the Veeam One alarm remediation action to simulate a Ransomware attack response!The Secure Restore operation is performed with Veeam Instant Recovery associated with Windows Defender antivirus scan, and the backup files are stored in an immutable Linux Hardened Repository!The clickbait is a Teddy Bear icon 😃This is a Hyper-V test environment.Below we have the PowerShell script for the compromised VM. It just changes the wallpaper and blocks the keyboard and mouse input for some time.It is necessary to have the IO Meter running in the background. Change the wallpaper name per your desired simulation.Start-Sleep -Seconds 5#Change Desktop$MyWallpaper="C:\skull-virus-malware.png"$code = @' using System.Runtime.InteropServices; namespace Win32{ public class Wallpaper{ [DllImport("user32.dll", CharSet=CharSet.Auto)] static extern int SystemParametersInfo (int

https://podcasts.apple.com/gb/podcast/exploring-2024s-tech-landscape-and-beyond-sottc-episode-09/id417182376?i=1000641900858In this episode, Anthony Spiteri hosts Michael Cade as they explore the technological landscape for 2024. They discuss the advancement and integration of AI across various sectors and use cases, including their everyday applications. We also examines the current trends and future potential of Kubernetes, changes in data platforms, and the critical nature of platform engineering. We also addresses the potential implications of VMware's acquisition by Broadcom and the ongoing need for skill development in the tech industry as that evolves. The episode concludes with forecasts for the tech landscape in 2024, particularly looking at Veeam's role and innovations and it's role in data protections.https://veeam.podbean.com/e/sottc-2024-e09-2024-tech-landscape/

This is a very simple calculator that uses backup size from the Veeam official calculator, the tape capacity, and the number/ retention amount required. Based on this information, it will tell you how many tapes you will need. http://tape.skitchlab.com

It’s that time of year again where we need to plan for the year ahead and be sure that any upcoming end-of-life or end-of-support dates from our dependent software vendors are addressed.Why does this matter when I’m just trying to protect the data?Times change, and software changes with them, until it’s no longer supported. At any point, a patch to an operating system, a .NET framework update, or anything else really, could end up with the software no longer being backed up properly, or not working at all in production. Without valid support there’s no process to get a fix, and whilst your backup software may still be in support with Veeam, if the vendor won’t fix the problem, it’s time to start panicking.With this in mind, let’s explore the software & operating systems being declared end of life in 2024 so we can start planning our upgrades/migrations if necessary. VeeamLets start with Veeam’s, products that have an end of fix or end of support within 2024. As a recap, Veeam have

After changing the hostname of your VBR server, you might have issues accessing the integrated PostgreSQL database. For example when creating a new database or restoring configuration, you see the following error: “SSPI authentication failed for User XYZ”While the database connection itself uses “localhost”, the pg_ident.conf references the hostname itself for administrative access.So after changing the hostname, you need to replace the old hostname with the new one inside the pg_ident.conf file. Also you can add additional or different users to access the PostgreSQL instance. The default path to this files is “C:\Program Files\PostgreSQL\15\data\”.There’s a KB article from Veeam which mentions this error. This also includes how to check the PostegreSQL logs: https://www.veeam.com/kb1471

In today's data-driven landscape, where information reigns supreme, safeguarding data against potential threats and ensuring its swift recovery in the event of an unforeseen disaster is paramount. Among the array of strategies that bolster robust backup and recovery protocols, data classification stands out as a foundational element that often dictates the efficacy of these practices. Understanding Data ClassificationAt its core, data classification involves the systematic categorization of information based on its sensitivity, value, and criticality to an organization. This process assigns labels or tags to data sets, enabling businesses to prioritize their protection efforts, allocate resources efficiently, and adhere to regulatory compliance requirements. Classification typically involves labeling data as public, internal-only, confidential, or highly sensitive, among other classifications, based on predefined criteria. Strengthening Backup ProceduresData classification forms the be

With the newest release V12, Veeam Backup & Replication is now capable of implementing immutability with HPE StoreOnce Catalyst stores. HPE calls this ‘Independent Software Vendor (ISV) Controlled Data Immutability (ISV-DI)’. With this post I want to quickly describe the requirements and configuration steps.RequirementsThere are some requirements, that need to be met in order to use immutability with StoreOnce systems.you need to have a Gen4 StoreOnce system with at least firmware 4.3.2 you need to configure Dual Authorization Maximum ISV Controlled Data Retention needs to be set to 365000 in the StoreOnce Catalyst Store you need to use forward incremental backup jobs and/or enable GFS for Backup Copy Jobs → For more information check the helpcenter Enable Dual AuthorizationWith Dual Authorization certain tasks on a StoreOnce require a second factor before they’re executed. This second factor isn’t a OTP token or something similar but rather a second user/password which you need to

On December 5th, 2023, Veeam unveiled a significant update to our Data Platform. This release introduces enhanced capabilities in detecting and identifying cyberthreats, facilitating faster responses and recovery from ransomware attacks, and ensuring comprehensive protection for our customers' data with robust security and compliance features. Our latest release incorporates an extensive range of supplementary features associated with cloud-native backup and backup services for AWS. This document will delve into these newly added capabilities. Veeam Backup and Replication 12.1 Backup of object storageProtect production data residing in both on-premises and cloud object storage with the powerful new backup and recovery functionality. Built on a storage-agnostic architecture, Veeam helps you to achieve your object storage recovery objectives without additional hardware investments. And when it comes to recovery, we ensure your recovery time objectives (RTO) are met by providing flexible

Hey everyone,Just a quick one from me here, I was playing about in my lab installing Veeam B&R and Veeam ONE v11a (because, why not?!), when I hit a strange issue. I’d snapshotted my VM prior to installing Veeam ONE so that I could revert back and try different methods (and play with automation). The first time I installed Veeam ONE, it worked PERFECTLY. Next day I revert the VM and tried to install it again, and I got an error that it failed to create the website and wouldn’t install!It seemed strange that a virtual machine I’d powered off before snapshotting would have two different outcomes when in both scenarios I booted the VM up and installed Veeam ONE in an identical way.So I started to dig into this and found the problem was caused by a dependency. When Veeam ONE installs, the following dependencies are required:Microsoft IIS ASP.NET 4.5 Component .NET Extensibility 4.5 Component Default Document Component HTTP Errors Component Static Content Component Windows Authenti

The following post can also be found on my blog - Veeam ONE - 12.1 Upgrade Veeam ONE - 12.1 Upgrade Veeam released the 12.1 update back in November 2023, and with it comes upgrades to most components, including Veeam ONE. Today, I will walk through the upgrade process in my homelab to update my current Veeam ONE server from 12.0 to 12.1. Many enhancements came with Veeam ONE 12.1, including some of the following - Veeam Threat Center Unified Analytics-Driven Approach to Data Management Integrated Dashboards Alarm Lifecycle ServiceNow Incident Management Integration Syslog SIEM Integration Elevating Veeam Data Platform Security Backup Security and Compliance: Instant Insights for Robust Data Protection Malware Detection: Pinpoint, Protect, Prevail A full list of the enhancements in Veeam ONE 12.1 can be found here - Veeam ONE 12.1 - What's New.***NOTE - You must download the Veeam ONE 12.1 ISO file to follow the steps.***The following steps are required to up

In the realm of IT infrastructure management, establishing a resilient backup schedule is critical for safeguarding data and ensuring business continuity. A robust backup strategy not only involves regular backups but also encompasses a well-thought-out schedule tailored to diverse data types and systems. This article aims to explore key considerations and best practices for implementing an automated backup schedule aligned with business continuity objectives, while emphasizing the need to distribute backups within backup windows to avoid overloading productive and backup resources. Understanding Business ObjectivesBefore diving into crafting a backup schedule, it's imperative to comprehend the business's specific needs and priorities. This involves understanding data criticality, compliance requirements, recovery time objectives (RTO), and recovery point objectives (RPO). These insights will inform the frequency, granularity, and retention policies for your backup schedule.[For a deta

As this was a hot topic on many plattforms, I thought it was worth sharing here.Today Dell and Veeam have released the new storage plugin for PowerStore OS 3.x.In general the plugin will only work with Veeam Backup & Replication build P20220302 or later. But what’s important to note, if you’re on P20220302 you need to install a private hotfix before installing the plugin itself; the details can be found in KB4243. The plugin is available for download in the Storage Plugin Section or directly here.If you want to join the discussion in the R&D forums or give feedback, here’s the corresponding topic. 

If the Hyper-V integration services are not installed, you cannot restore any data from Veeam Backup.Please follow the steps to install Hyper-V integration services in the Ubuntu Linux VM of Hyper-V.  1.Login to Hyper-V host.2.Open PowerShell as Administrator.3.Run the command as follows.Get-VMIntegrationService -VMName "ubuntu2310"  4.Open the Hyper-V Manager tool.5.Right-click the VM and select the Settings.  6.Select Integration Services on the Settings of the VM page.  7.Select the Guest services checkbox on the Integration Services page and click OK.  8.Run the command as follows to ensure the Integration Services of the VM are enabledGet-VMIntegrationService -VMName "ubuntu2310"  9.Login to the Linux Server.10.Run the command as follows to edit modules.vim /etc/initramfs-tools/modules  11.Add hv_modules to initramfs-tools modules.hv_vmbushv_storvschv_blkvschv_netvsc  12.Run the following command to update the apt packages.sudo apt update  13.Run the following command to upgrade t

Veeam Backup for Microsoft 365 has an error in one of the mailboxes. The error message is "There is an error in XML document…The specified type was not recognized: name='SharingMessage'. It happened after I upgraded the VBM365 from version 6 to version 7a. This is a known issue, and Veeam released a HOTFIX on December 15. Please download the HOTFIX from  https://www.veeam.com/kb4527 and follow the steps to fix it. 1.Login to Veeam Backup for Microsoft 365 Manager server.2.Open Veeam Backup for Microsoft 365 Console.3.Verify the Veeam Backup for Microsoft 365 version from Veeam Backup for Microsoft 365 console (Help |Abut).  4.Ensure the Version is 7.1.0.1301 or 7.0.0.4388.  5.Right-click all jobs and select Disable to stop all active tasks.  6.Close the console and stop the following services on the Veeam Backup for Microsoft 365 server.Veeam Backup for Microsoft 365, Veeam Backup Proxy for Microsoft 365 and Veeam Backup for Microsoft 365 RESTful API.  7.Open https://www.veeam.com/kb45

Hi Folks,I decided to talk about something a bit different today. A non Kubernetes quick video. One of the main components of Zero Trust when it comes to Backup and Replication is not put all of your components together, otherwise it can get messy like in my video. Whishing everybody a great upcoming New Year!  

Veeam Backup and Replication release 12.1 delivers new features and enhancements.Among them is the Four-Eyes Authorization.In this video, there is a brief demonstration. I hope this information is helpful! 

Continuing with my Linux theme this year, I thought I'd share how easy it is to implement Linux OS as Veeam Repositories in your environment. Instituting immutability with the Veeam Hardened Repository has certainly gained traction, and for good reason. There are several good posts out there on how to do so, including a couple of my favorites from @HannesK and Paolo Valsecchi here and here, respectively. But maybe you're not quite ready to go all in that route yet. Or maybe there's some organizational policies in place preventing you from doing so. Well, you can still use Linux OS as a Veeam Repository and not have to configure it as a VHR. In this post I'll share exacxtly how to do just that.System RequirementsThe first order of business before installing Linux is to make sure you have the supported hardware and software. Below shows a list of Veeam-supported Linux distributions: Linux OS RequirementsBesides the above, there are CPU and RAM requirements. The amount of CPU cores and Me

I’m planning on making a better writeup with my settings and some photos, but for now this is on my mind after helping someone today.  I often see Veeam setups with 1 large datastore / volume in Windows for their repository. Other times quite often it will be multiple disks spanned into a single logical Volume, lets call it D:\. You can still get good performance like this, and the simplicity is quite nice, but can it be better? If you have some spare storage kicking around I encourage you to try this in your lab. Run your benchmarks on this single volume (D:\) record your results and then then delete the logical and physical volume. Create 3 new equal sized volumes with matching logical volumes. Lets call them E:\ F:\ and G:\. Next run IOMeter or your favorite benchmarking tool.  Make sure you are pushing the queues to see the benefits of multiple physical/logical volumes.  The next thing you can do is check and modify queue depth on the adapters and Windows server. With a large backu