Blogs and podcasts

Bring your knowledge and expertise while creating blogs and podcasts

  • 753 Topics
  • 6,188 Comments

753 Topics

regnor
regnorVeeam Legend, Veeam Vanguard
posted in Blogs and podcasts

Vulnerability in Veeam Backup & Replication - March 2023

Veeam has just informed it’s customers about an existing vulnerability in Veeam Backup & Replication. Unauthorized users may be able to request encrypted credentials from the VBR service, and therefore get access to the backup infrastructure. The KB articles haven’t received updates so far, but the vulnerability did get a CVSSv3 score of 7.5.EDIT: The KB article has just been published: KB4424It’s recommended to patch VBR as soon as possible!SolutionPatches have been released for VBR V11 and V12. Please keep in mind that older releases are also affected, but no longer get fixes. So you need to upgrade your installation to a supported release.Patch for Veeam V11a KB article for V11 Patch for Veeam V12 KB article for V12WorkaroundAs a temporary workaround you can block access to TCP port 9401 on your Veeam Backup & Replication server. This will affect the connection of mount servers to the VBR server, so only use this if you don’t have a distributed Veeam environment. And still a

60
Chris.Childerhose
6 months ago
jorge.delacruz
jorge.delacruzCommunity Manager
posted in Blogs and podcasts

Veeam ONE - Extensibility, and Enterprise Observability. How to forward VONE alarms to any Syslog

I would like to share with you my experience in achieving Enterprise Observability, and how I utilized Veeam ONE to enhance the visibility of my environment.Quick introAs you may know, achieving Enterprise Observability is not an easy task, especially with the abundance of monitoring tools out there, each with their own unique functionalities that may overlap with one another.However, Veeam ONE stood out to me as one of the most efficient tools, offering over 340 native alarms to keep me on top of anything happening to my Virtual Infrastructure, Veeam Data Platform, and the status of its components.What's more, Veeam ONE also offers great reporting capabilities, with over 150 reports that can be scheduled and sent in PDF format for better audit.To take it up a notch, I combined the real-time alarms from Veeam ONE across the entire stack and sent it to my favorite Syslog tool, Grafana Loki. The best part is, you don't need to configure anything on vCenter, ESXi, VBRs, VB365, or VB Serve

6
Moustafa_Hindawi
6 months ago
vmJoe
vmJoeVeeam MVP
posted in Blogs and podcasts

From the architect’s desk - Multi-factor authentication how-to

One of the must-have features for providing access security for any sensitive application is the ability to implement multi-factor authentication (MFA) as part of the login process. The release of Veeam Backup and V12 added the ability to enable Multi-factor authentication for logging into the Veeam console (including the remote console). The details:Before discussing the setup and configuration of MFA, we should discuss what MFA apps are supported.Veeam Backup and Replication supports Time-Based One-Time Passwords (TOTP) as per RFC 6238 installed on a mobile device.  For example, the following MFA TOTP applications are supported:Microsoft Authenticator Google Authenticator LastPass Authenticator DUO Okta Verify Many more are listed if you do a quick internet search ;)A console auto-logout time can also be set to ensure that a user gets logged out of the Veeam console after a configurable period of inactivity. Configuring MFA:Step 1:Access the Users and Groups selection on the options

11
Scott
14 days ago
wolff.mateus
wolff.mateusVeeam Legend
posted in Blogs and podcasts

Monitoring Veeam Backup Server with Checkmk

Frequently I'm ask in how to monitor backup jobs of Veeam externally Veeam servers.I know that we can do this easy with Veeam One. But here I’m going to show you a solution to monitor backup jobs having only a Veeam Backup Server (without VEM or VONE).So, the application I’m talking about is Checkmk. Checkmk is a monitoring software usually used on NOC (Network Operations Center) environments. However, this is an easy tool to deploy and very light to hav in our backup environment. VersionsCheckmk has a free and commercial version:Checkmk Raw Edition (CRE) – Free and 100% Open Source. It even incorporates Nagios into its core. You can use it to monitor entire environments. Support for this release is available through the Checkmk community forum.Checkmk Enterprise Free Edition (CFE) – version already based on the standard edition, with Checkmk Micro Core (CMC), which means that it is no longer based on Nagios and is aimed at small IT environments with a single site and up to 25 monitore

23
J
5 months ago
vSyntaxError
vSyntaxErrorVUG Leader
posted in Blogs and podcasts

Migrating VBR to PostgreSQL [Part 2]

In the second part of the series “Migrating VBR to PostgreSQL [Part 2]” we will have a look at the migration itself. First of all:Update Veeam via the recommended way:https://helpcenter.veeam.com/docs/backup/vsphere/upgrade_vbr.html?ver=120You will not be able to migrate the database with the upgrade itself.After the upgrade, you can use the following guide to migrate the configuration database to PostgreSQL: https://helpcenter.veeam.com/docs/backup/vsphere/vbr_config_migrate_to_postgresql.html?ver=120This howto describes the 5 easy steps to do the migration based on the guide above. If you want to know how to install the PostgreSQL on a external Debian-based server check the howto in part 1 of this small series: https://community.veeam.com/blogs-and-podcasts-57/migrating-vbr-to-postgresql-part-1-4277 Step 1 Stop and disable all your jobs to make sure nothing change while you are doing the migrate. Step 2 Create a configuration database backupGo to Main Menu → Configuration Backup: Ena

5
dloseke
6 months ago
vSyntaxError
vSyntaxErrorVUG Leader
posted in Blogs and podcasts

Migrating VBR to PostgreSQL [Part 1]

Part 1 of the small series is about to install a PostgreSQL server on a Debian system.Ok let’s start. Step 1 Install the postgres package with the package manager of the distribution.You have to have PostgreSQL at least in version 14! Because this is a Debian system I had to enable the official repos from PostgreSQL:root@postgres:~# echo "deb http://apt.postgresql.org/pub/repos/apt/ $(lsb_release -cs)-pgdg main" >> /etc/apt/sources.list.d/postgres.listroot@postgres:~# wget --quiet -O - https://www.postgresql.org/media/keys/ACCC4CF8.asc | sudo apt-key add - I normally use aptitude, but you can for sure use apt-get as well.root@postgres:~# aptitude updateroot@postgres:~# aptitude install postgresql Step 2 To enable PostgreSQL to use encrypted passwords we have to uncomment the password_encryption option in the configuration fileroot@postgres:~# vi /etc/postgresql/15/main/postgresql.confpassword_encryption = scram-sha-256         # md5 or scram-sha-256and restart the PostgreSQL serv

2
vSyntaxError
6 months ago
regnor
regnorVeeam Legend, Veeam Vanguard
posted in Blogs and podcasts

HPE StoreOnce: Immutability with v12

With the newest release V12, Veeam Backup & Replication is now capable of implementing immutability with HPE StoreOnce Catalyst stores. HPE calls this ‘Independent Software Vendor (ISV) Controlled Data Immutability (ISV-DI)’. With this post I want to quickly describe the requirements and configuration steps.RequirementsThere are some requirements, that need to be met in order to use immutability with StoreOnce systems.you need to have a Gen4 StoreOnce system with at least firmware 4.3.2 you need to configure Dual Authorization Maximum ISV Controlled Data Retention needs to be set to 365000 in the StoreOnce Catalyst Store you need to use forward incremental backup jobs and/or enable GFS for Backup Copy Jobs → For more information check the helpcenter Enable Dual AuthorizationWith Dual Authorization certain tasks on a StoreOnce require a second factor before they’re executed. This second factor isn’t a OTP token or something similar but rather a second user/password which you need to

11
regnor
3 months ago
Geoff Burke
Geoff BurkeVeeam Legend, Veeam Vanguard
posted in Blogs and podcasts

The Kube Ambassador Veeam Vanguard, Veeam Legend & the perils of always working from home

Hi Folks, Taking this one out for a walk from the KubeKorner since I will talk about the Legend and Vanguard Program. Plus the post covid reality of always working from home.  

2
Moustafa_Hindawi
6 months ago
Nico Losschaert
Nico LosschaertVeeam Legend
posted in Blogs and podcasts

Upgrade Veeam Cloud Connect to V12

Hi @Rick Vanover  already created an awesome upgrade center for V12 (V12 Upgrade Center | Veeam Community Resource Hub) but I just wanted to add a bit more about upgrading to V12 especially for  Veeam Cloud Connect at the service providers. As you all know, the GA edition of V12 was available since the 14th of February.As a service provider it was already possible to install the RTM edition of V12 2 weeks before on the 30th of January.That is a normal behaviour because all Veeam customers using a service provider should wait upgrading until the service provider has upgraded their infrastructure to the new major version.Why? The upgrade is breaking, it will not work until the service provider has performed the upgrade!Therefore the service provider should always be the first and afterwards it’s time for upgrading the Veeam environment of the customers.As being a service provider for VCC BaaS I decided to not install the RTM edition, but wait until the GA edition was available.Why? Other

12
D
6 months ago
ericeberg
ericebergComes here often
posted in Blogs and podcasts

Securing your backups and demonstrating compliance with Continuity

Customers in regulated industries like finance, healthcare, telecommunications, and energy are required to validate their compliance with regulatory standards such as PCI DSS, HIPAA, various ISO standards, and others. Compliance is a difficult problem area. Data must be gathered from across the organization and compiled into standardized reports and submitted to the regulatory body. Then, for any gaps identified, remediation actions must be defined and progress to rectify the gaps must be demonstrated. Lastly, compliance is an ongoing process that must be followed and enforced by policy wherever possible to avoid fines and penalties that could result from an audit failure. Additionally, many organizations applying for cybersecurity insurance face an increasingly complex list of requirements, so the problem field has potential to grow into non-regulated sectors. In summary: compliance is enormously time-consuming, difficult, and the stakes are high.Continuity Software's StorageGuard is

6
cymon
6 months ago
jorge.delacruz
jorge.delacruzCommunity Manager
posted in Blogs and podcasts

[Veeam ONE v12] Enhanced Security, and Audit visibility using Grafana

Veeam ONE v12 has been launched, and it is massive! Among so many other great features, I would like to extend today and focus on this particular new security feature, Auditing, as per the What’s New:When I saw that functionality, I was already so excited to see what level of audit we would have.How to enable Veeam ONE v12 Auditing?It is really easy under the Server Settings, you will find the section called Auditing, then mark what is most relevant for you. I would mark all of them:After we enable them, we can quickly go to our traditional Microsoft Windows Events Log, and we will find a new section called Veeam ONE. Inside this category, we can find different events, with event category, etc.:If you explore a bit more, you could filter by Event ID, so as a quick example:Event ID: 10006 - These are authentication anomalies, meaning wrong user/password. Event ID: 2 - These are usually Veeam ONE Settings changes, like a new password added, a new report saved/created, etc. Event ID: 3 -

5
Moustafa_Hindawi
6 months ago
vNote42
vNote42Veeam Vanguard
posted in Blogs and podcasts

[What (else) is new in v12 - XIV] SureBackup – Disable Windows Firewall

When it comes to SureBackup, at least a ping test is desirable. In some situations no network connection can be established to the VM under test because of the internal Windows Firewall. Now it is possible to have SureBackup disable this to reduce these kind of false positives.For more information to this feature read the documentation:https://helpcenter.veeam.com/docs/backup/vsphere/surebackup_job_tests_vm.html?ver=120See the list of all new features in v12: https://www.veeam.com/veeam_backup_12_0_whats_new_wn.pdf 

8
Scott
6 months ago
vmJoe
vmJoeVeeam MVP
posted in Blogs and podcasts

From the Architect’s desk - things to consider before you install or upgrade to V12

Veeam Backup and Replication V12 have a lot of improvements and new features in it.  If you are upgrading to V12 or installing Veeam Backup and Replication, there are many things that you should consider when planning your upgrade or installation.The following are a few of my thoughts to help guide you in forming your implementation and configuration decisions.If you are upgrading to VBR V12,  your first step should be to consult the following documents located at helpcenter.veeam.com:What’s New Release notes VBR V12 User Guide The release notes document has a good section detailing the upgrade process.Installation/Upgrade of the VBR console serverLet’s start with the installation and process and what to expect.VBR V12 uses the same  license key format as V11, so there is no need to update to a V12 on the customer portal.  The installation GUI is revamped and looks slick.  As it is new, you will notice that some options have been rearranged, so take your time and pay attention to what

19
dloseke
2 months ago
wolff.mateus
wolff.mateusVeeam Legend
posted in Blogs and podcasts

Veeam v12 Help Center is Live!

Hello everybody! Say hello to Veeam Help Center v12: https://www.veeam.com/documentation-guides-datasheets.html   

5
Chris.Childerhose
7 months ago
vNote42
vNote42Veeam Vanguard
posted in Blogs and podcasts

[What (else) is new in v12 - XIII] - File Level Restore – Restore Permissions only

Another new feature when restoring (Windows) files is the possibility to restore only the permissions. This can be helpful if you accidentally activate inheritance for a directory.You can select single files or a directory. As usual, a summary is displayed when the job is completed. The error shown in the screenshot is due to a file that has already been deleted and for which the permissions cannot be restored.For this to work, network connection must be established. VIX does not work here.

3
dloseke
7 months ago
olivier.rossi
olivier.rossiVeeam MVP
posted in Blogs and podcasts

Object Storage: Backup directly to AWS S3 - step by step recipe

IntroductionV12 is launching (register here) on Valentine's day and one of the most anticipated feature is the ability to backup directly to object. As my Valentine's gift to you, I wanted to highlight what's required to get your first V12 backup Direct to AWS S3 going. What do we need?An S3 bucket, an IAM user with the proper policy and a VPC for the helper appliance. A quick note about the V12 direct to object "helper" applianceIn the context of direct backups to AWS S3, the helper Appliance is a temporary EC2 instance that Veeam leverages to perform backup file health-checks.The benefit is to avoid having to "pull-down" any of the backup data on-premises to perform that maintenance operation. You configure the helper appliance settings at the Mount Server step of declaring your Object Repository.Giving the proper permissions in your policy, Veeam gives you the option to auto-create the required VPC, Subnet, Security Group and Route table.I personally would rather set all of this up-

6
L
6 months ago
HunterLAFR
HunterLAFRVeeam Legend
posted in Blogs and podcasts

Collaboration | Veeam B&R Telegram Notifications!!

Hi everyone,It's being a while since this idea came to my mind, I want to be notified differently that mail, more accurate and clean, my mailbox is always a mess, and I get too much mails to read them all, and start pending on critical alerts and other stuff.I put together a powershell script, a schedule task and a few things in Windows Server where my Veeam B&R V12 is installed, and I managed to receive in a telegram bot the windows events related to Veeam tasks.Very basic, Im not programming skilled or anything like that, do you want to help and contribute to improve and develop this idea?here I share what I've done and shared to anyone who wants to help, participate and use this workaround.I created a Telegram Bot with BotFather, here the link With normal steps. Then, we need to also get our ID, here the link for a very simple explanation save the ps1 file in a reachable place for you later, this is the code I used: Function Send-Telegram {Param([Parameter(Mandatory=$true)][Stri

3
Scott
7 months ago
vNote42
vNote42Veeam Vanguard
posted in Blogs and podcasts

[What (else) is new in v12 - 12] - File Level Restore – Compare with Production

A feature that was already available in Veeam Explorer for Active Directory now finds its way into the Windows File Level Restore: Compare with Production. This gives you the option to view the differences between the files in the restore point and the current files in production.After pressing the button, you will be asked for the user with the required permissions.Then you see state for files and directories. What you not see are new files in production that are not in the selected restore point.You can also show differences in file attributes.At least in tested version, this feature (and the following) does not work for Linux.

9
vNote42
7 months ago
regnor
regnorVeeam Legend, Veeam Vanguard
posted in Blogs and podcasts

Veeam Backup for Microsoft Azure: Register Resource Provider "Microsoft.ServiceBus"

After the initial setup of Veeam Backup for Microsoft Azure I’ve had two different issues.The backup jobs finished with following warning:Crash-consistent snapshot of XYZ has been created. Cannot download VSS agent binaries from the storage account: The subscription is not registered to use namespace 'Microsoft.ServiceBus'. See https://aka.ms/rps-not-found for how to register subscriptions. Also FLR restores failed:Preparing worker for restore failed. Error: Cannot find any worker. Worker deployment failed, see logs for details Both of these messages had the same root cause and especially the first one already points to the right direction, the “Microsoft.ServiceBus” Resource Provider wasn’t registered in Microsoft Azure.The solution is really simple, just register this Resource Provider via the Azure Portal or use the Azure Powershell. Register-AzResourceProvider -ProviderNamespace Microsoft.ServiceBus I’m not sure if this Resource Provider should be registered by default, and if so,

1
Chris.Childerhose
7 months ago
vNote42
vNote42Veeam Vanguard
posted in Blogs and podcasts

[What (else) is new in v12 - XI] Network throttling

Network throttling is not used in every environment. Mostly in connection with branch offices. Here it is essential to not overload the connection to the head quarter. To throttle network before, you had to configure source and destination network and time windows to limit bandwidth for backup traffic.With v12 there are new features:Generally use public addresses for target range. Option to never throttle restore activities. Select a time frame to higher the limit.

5
dloseke
7 months ago
kirststoner12
kirststoner12Product Strategy
posted in Blogs and podcasts

Get Ready: Enhanced Immutability Monitoring in Veeam ONE v12

One rule of backup is to always have more than one copy of data. This has often been defined as following the 3-2-1 rule, which states, to ensure recoverability in the face of disaster, you need to have 3 copies of data, on 2 different medias, with 1 copy offsite. By following this strategy for backups, businesses gain three different copies of data that they can recover from. However, with the continued threat of ransomware in today’s IT landscape, we need to evolve this rule to meet the challenges that face businesses today. As data is the lifeline for every business, putting in the necessary steps to  keep backups protected from malicious attacks is imperative. To do this, having a immutable storage option that prohibits backups from being altered or deleted should be an added element to a long standing rule for backups. With the addition of adding a copy of data that is offline and/or immutable, businesses can ensure that at least one copy is locked from being changed or deleted. H

12
kirststoner12
4 months ago
MicoolPaul
MicoolPaulVeeam Legend, Veeam Vanguard
posted in Blogs and podcasts

Speeding up Backup/Restore Jobs when Using Preferred Networks

 When using preferred networks you might find your backup jobs take longer to initalise, commonly when you’ve got distributed backup components such as a physical proxy/repository and your Veeam Backup & Replication server isn’t performing any backup processing. This is because your Veeam Backup & Replication Server is also required to use your preferred networks configuration, even if it doesn’t have any network connectivity that resides within your preferred networks.This causes the job initialisation to take a lot longer than usual, and this grows even slower the more distributed your network topology and the more preferred networks you have. This is because your Veeam Backup & Replication server has to work through every preferred network match, before moving onto the rest of your network interfaces.Now, a quick reminder that the scenario above is just one example of why isolated networks might exist, but certainly not the only one. If you’re attempting to use preferred

4
regnor
7 months ago
regnor
regnorVeeam Legend, Veeam Vanguard
posted in Blogs and podcasts

VBR: Error during guest credentials test ("Building list of machines to process Error: [...])

Just a quick post on an interesting issue with the Guest Credentials test in Veeam Backup & Replication we’ve seen last week. Instantly after clicking “Test Now” in the Guest Processing section of a certain backup job, an error was displayed."Building list of machines to process Error: (Child group-vXYZ (Folder) for object XYZ was not found)"Normally you see such errors with vSphere when a certain object has been deleted or recreated. While Veeam displays names of objects, internally it works with MoRef IDs. So we’ve checked the job selection, custom credentials and the application aware processing settings. But all listed objects were still valid, especially no folders where used anywhere.We’ve contacted Veeam Support and had a remote session. The support engineer discovered some orphaned VM folders in the exclusions. After removing those, the error disappeared and the credential check worked again. From a logical point I thought those weren’t relevant for the check, so I didn’t c

5
regnor
7 months ago
vNote42
vNote42Veeam Vanguard
posted in Blogs and podcasts

[What (else) is new in v12 - X] miscellaneous

I want to continue my post series about little new features in the new v12 realease. Here are 3 little things that will make administrators live a little easier.Modern Authentication for mail notificationsPrior to v12 it was just possible to set SMTP server settings for basic authentication. With v12 you can add Microsoft 365 and Google Gmail for mail notification too.  More intuitive Add Storage dialogIn older version, it was necessary to press Show more vendors when adding a storage product that is not listed. With v12, all vendors are listed in a scroll-able list. New default with new repositoriesWith v12 Use per-machine backup files is the new default option when adding a new backup repository. 

15
Scott
7 months ago
Link State
Link StateVeeam Legend
posted in Blogs and podcasts

WAN Accellerator sizing & WAN Low bandwidth mode vs WAN High bandwidth mode!

Hello, everyone,I wanted to share the sizing of an accelerated WAN infra and the differences between WAN Low bandwidth mode vs WAN High bandwidth mode. The DR consists of 6 replica VMsSizing for Low bandwidth under 100 MBhttps://helpcenter.veeam.com/docs/backup/vsphere/wan_accelerator_sizing.html?zoom_highlight=sizing&ver=110 Using RVTool extract the list of VMs with the total Original VM on Source Vmware Tenant side: 1649 GB = 1.649 TB  · The connection between the client and the DR is a 100 Mb.Server1                                           1024 GB   Digest  2% 20.48                          Microsoft Windows Server 2012 (64-bit) Server2                                           200 GB    Digest 2% 4                                    Microsoft Windows Server 2012 (64-bit) Server3                                           150 GB    Digest 2% 3                                    Microsoft Windows Server 2016 (64-bit) Server4                                           200 GB    Di

5
Link State
7 months ago

Badge winners

Show all badges
Terms & Conditions