VeeamOn Tours 2024
Bring your knowledge and expertise while creating blogs and podcasts
Today, I’d like to talk about creating and scoping realistic and enforceable RPOs and RTOs for your Business Continuity (BC) and Disaster Recovery (DR) policies and Service Level Agreements (SLAs) within your organization. As every organization will have different requirements the focus of this blog post is on general considerations for shaping your policy.Additionally this blog post is focused around policy design as opposed to backup technologies and should be vendor agnostic for the most part, though where I am aware of features from my backup solution of choice (Veeam of course!!!) I have referenced improvements that solutions such as Veeam can bring to the process.The assumption is made that you’re already aware of the applications, operating systems and data within the organisation/environment you’re designing these policies for. Step One: Define Recovery Priority Before we start to consider recovery point objectives, we should consider the recovery time objectives of our workloa
Following the line of some of my topics, in Veeambp.com we can find a very useful unofficial tool This tool is not Veeam supportedIt was developed externally and is not linked with Veeam Software or ServiceNow in anyway, No support is offerred or inferred from Veeam Software on this tool. vSnow App is an application to integrate Veeam Backup Enterpriser Manager with ServiceNow vSnowApp for ServiceNow:The application offers integration with Veeam Enterprise Manager.vSnowApp provides following capabilities:Performance Dashboard Incidents Management Manage Backup Jobs. Failover Plans Agent Jobs Backup Servers Management How vSnowApp Works: vSnowApp function as an intermediary between Veeam Enterprise Manager and ServiceNow, after you deploy the vSnowApp, you can manage reporting and management of backup infrastructure from ServiceNow. Pre-requisites:ServiceNow MID Server Veeam Enterprise ManagerSupported ServiceNow Instances:New York Orl
With the release of Veeam Backup for Microsoft 365 v6 the Self Service Portal was also unleashed. In this video we run through a scenario where a new tenant is being onboarded from the Service Provider point of view as well as what steps need to be actioned by the tenants.
As we all know Veeam released version 12.2 last week and I was able to get my lab upgraded finally. Check out my blog post below and I have included a link to my blog site as well.Upgrading to Veeam Data Platform 12.2: What You Need to Know – Just Virtualization (just-virtualization.tech) Upgrading to Veeam Data Platform 12.2: What You Need to KnowThe latest release of Veeam Data Platform, version 12.2, is generally available, bringing many new features and enhancements that promise to elevate your data protection and management capabilities. Whether you’re a seasoned Veeam user or considering an upgrade, here’s a comprehensive look at what Veeam 12.2 offers and how to make the most of it.Key Features and Enhancements1. Expanded Platform Support: – Proxmox and MongoDB: Veeam 12.2 now supports Proxmox and MongoDB, broadening its compatibility and making it easier to protect data across diverse environments. – Enhanced Nutanix AHV Support: Improved integration with Nutanix AHV ensur
One of the biggest mysteries of Veeam’s list of features in my opinion is the Backup Copy Job. On the surface, they’re easy to understand – you create a Copy Job, use some supported backup source, and copy this source VM data to a designated target to implement part of the 3-2-1(-1-0) Rule – have multiple copies of your data and/or at least 1 offsite copy of your data. Easy, right? Well, when you look under the hood of the technology behind the retention, scheduling, interval, etc. things start to get murky pretty quick, at least for me. The most difficult to understand about Copy Jobs in my opinion is how the retention algorithm works when using the GFS (grandfather-father-son) archive option. And with the changes brought to Copy Jobs with the release of Veeam v11, I believe things got worse instead of better. As such, I thought it would be beneficial to the Veeam Community for me to go through the Backup Copy process from a deep-dive perspective, and see if I can make a bit more clea
In case you missed it, a while back @tsightler presented an amazing webinar Building SecureLinux Repositories.The main topics covered in the presentation are:Securing the host system Isolating Veeam processes Levaraging snapshots Automated deploymentBONUS! Tom also does a side-by-side comparison of Veeam fastcloning on XFS vs ReFS!While Tom presents top content, I think one of my favorite parts was coverage of the fail2ban tool (at 41:47 timestamp).
I was alerted to the CVE in some Slack RSS feeds. I figured why not get the new patch that was released and installed it. Quite simple and straight forward, which is usually the case with Veeam.I did a bit of digging into the KB and was quite excited to see that they included more features into this than I was expecting. I figured this was mostly to fix the CVE’s. New Features and EnhancementsPlatform SupportAlmaLinux 9.3 and Rocky 9.3 supported for use as Linux-based backup repositories and backup proxies. Microsoft Azure Stack HCI 23H2 (March 2024 build) support. Microsoft SharePoint Subscription Edition 24 H1 support for application-aware image processing.GeneralImproved VMware NBD (Network Transport Mode) transport mode performance by up to 2x. Backup Copy jobs now support using other backup copy jobs as a source for VMware, Cloud Director, and Hyper-V workloads. Reduced the performance impact of disk fragmentation on ReFS repositories with Integrity Streams disabled by removing
VMware's vSphere 8 Update 3 brings significant enhancements and new features, providing improved performance, flexibility, and security. Key Updates vSphere Live PatchvSphere Live Patch in Update 3 allows critical bug fixes without needing to reboot or evacuate hosts. This ensures minimal disruption as virtual machines undergo fast-suspend-resume (FSR) during patching. However, VMs with vSphere Fault Tolerance or using Direct Path I/O must be manually remediated.Partial Maintenance ModeThis new state allows existing VMs to continue running while disallowing the creation or migration of new VMs during vSphere Live Patch remediation tasks.Enhanced Image CustomizationvSphere Lifecycle Manager now supports more granular customization of images, including the removal of non-essential components and retaining specific driver versions, optimizing for remote and edge use cases.Dual DPU SupportvSphere 8 Update 3 introduces support for dual DPU configurations, enhancing high availability and net
Scenario:Very recently a customer asked me if Veeam could leverage Data Domain mtree replica for DR purposes.Of course, the answer is YES! While this idea is not new, I thought it would be a good reminder of Veeam’s backup import capabilities. Steps:You must use Data Domain repository on the source site. It most likely will be declared as a DDboost share. The mtree should be replicated to the DR site. Note that the mtree replica will be Read Only! The mtree replica needs to be exposed as a share over your protocol of choice (CIFS, DDboost), so it can be defined in the DR VBR server. In this example, I chose DDboost.Note again that this DDboost share is Read Only! The last step is to declare that DR DDboost share and import backups You should now be able to access these backups from the “Disk (Imported)” section. Remember that you will have to manually rescan that repository in order to refresh new “mtree replicated” restore points.
This article was birthed by the following article shared in the community which by @Viperian. Kindly take a look at the comment section of this post as they are very informative as well.I see a lot of environments shared online with the .local suffix and this made me create a blog post on how to set up a Domain Controller as Recommended by Microsoft. There are numerous articles on this topic on the blog but I have decided to share the latest that was prompted by the above concern.But then, this is a new Active Directory environment. The issue has not been solved for existing AD environments with the .local suffix. Hence, this guide was developed to tackle this problem. Please see “how to change Active Directory Domain name from dot local to dot com” for more information. Note: I would recommend backing up your AD environment before making any changes to your domain controllers. I would recommend using Veeam Backup and Replication for AD protection. This ensures that you can recover in
Hello Community!For years, I have been Looking for the Perfect Dashboard, using different technologies and approaches, which includes Veeam ONE, Elastic, Splunk, and Grafana. All the mentioned technologies are great for deep visibility, log inspection, capacity planning, etc.But as Veeam has been moving into the right direction of including RESTful API on all products, I finally decided myself to use a combination of Bash Shell Script, InfluxDB, and Grafana.Here it is myself with a Grafana t-shirt I made, on the example monitoring Veeam :) How does all of this looks like?So, if you are wondering how all of this might look, it is indeed quite easy, so on the left we have all sort of Veeam Products, with their RESTful API, in this case:Veeam Enterprise Manager - https://helpcenter.veeam.com/docs/backup/rest/overview.html?ver=100 Veeam Backup for Microsoft Office 365 - https://helpcenter.veeam.com/docs/vbo365/rest/overview.html?ver=40 Veeam Backup for Azure - https://helpcenter.veeam.com/
In the second part of the series “Migrating VBR to PostgreSQL [Part 2]” we will have a look at the migration itself. First of all:Update Veeam via the recommended way:https://helpcenter.veeam.com/docs/backup/vsphere/upgrade_vbr.html?ver=120You will not be able to migrate the database with the upgrade itself.After the upgrade, you can use the following guide to migrate the configuration database to PostgreSQL: https://helpcenter.veeam.com/docs/backup/vsphere/vbr_config_migrate_to_postgresql.html?ver=120This howto describes the 5 easy steps to do the migration based on the guide above. If you want to know how to install the PostgreSQL on a external Debian-based server check the howto in part 1 of this small series: https://community.veeam.com/blogs-and-podcasts-57/migrating-vbr-to-postgresql-part-1-4277 Step 1 Stop and disable all your jobs to make sure nothing change while you are doing the migrate. Step 2 Create a configuration database backupGo to Main Menu → Configuration Backup: Ena
Problem: Like a shooting star, sometimes can happens that some backup job on a Synology NAS fails with this error:Error: Incorrect function. Agent failed to process method {ReFs.SetFileIntegrity}.with VB&R 11.0.1.1261 and DMS 7.0.1 with a SMB share.It seems to be related to “Fast clone” feature inside Synology control panel. Solution: Adding this registry key in the VB&R machine seems to solve the issue[HKEY_LOCAL_MACHINE\SOFTWARE\Veeam\Veeam Backup and Replication]"UseCifsVirtualSynthetic"=dword:00000000 As reported in this thread, that registry key tweaks the full fast clone feature.https://forums.veeam.com/microsoft-hyper-v-f25/error-incorrect-function-agent-failed-to-process-method-refs-setfileintegrity-t68754.html More about this topic:All said above, I found this topic on reddit where the issue is present on Veeam 9.5u4 and always a Synology NAShttps://www.reddit.com/r/Veeam/comments/omridr/synology_ds1821_and_veeam_95u4/What is Fast clone:https://kb.synology.com/en-id/
I speak to people often about ransomware and Veeam ONE has a helping hand here that can do more than many people think. What is important however is that the alarms and reports that matter get to the right persona are made visible. In this post I want to cover the 4 alarms and 1 report that matter the most AND how to handle the conditions that make these happen. Let’s get into it, these simple steps will make a different in getting Veeam ONE’s ransomware or malicious activity detected quickly.Possible Ransomware Activity AlarmThis alarm is in the Alarm Management section for both VMware and Hyper-V and looks at two sets of rules: sustained high CPU and disk writes; but also looks at sustained network transfer (exfiltration). At a minimum, this alarm should have an email sent to two or more persons (backup admins, security team, etc.) via email and separate the emails with a space: I also recommend going into the actions section, and put in a script that does something relevant to your
One of the must-have features for providing access security for any sensitive application is the ability to implement multi-factor authentication (MFA) as part of the login process. The release of Veeam Backup and V12 added the ability to enable Multi-factor authentication for logging into the Veeam console (including the remote console). The details:Before discussing the setup and configuration of MFA, we should discuss what MFA apps are supported.Veeam Backup and Replication supports Time-Based One-Time Passwords (TOTP) as per RFC 6238 installed on a mobile device. For example, the following MFA TOTP applications are supported:Microsoft Authenticator Google Authenticator LastPass Authenticator DUO Okta Verify Many more are listed if you do a quick internet search ;)A console auto-logout time can also be set to ensure that a user gets logged out of the Veeam console after a configurable period of inactivity. Configuring MFA:Step 1:Access the Users and Groups selection on the options
Many times we wonder what happens with encrypted VMs , here is this great explanation of Veeam Backup of Encrypted VMs Veeam Backup & Replication lets you back up encrypted VMs. The backup infrastructure must meet the following requirements:VM encryption instances must be preconfigured in the virtual infrastructure: you must set up the key management server, create the VM encryption policy and assign it to VMs in advance. The backup proxy used for backup must be working in the Virtual appliance transport mode or Network transport mode with SSL encryption enabled. The backup proxy working in the Virtual appliance transport mode must be deployed on an encrypted VM. Ensure either that you use a common Key Management Server (KMS) or that the Key Management Server clusters at both sites use common encryption keys. Replication of Encrypted VMsVeeam Backup & Replication lets you replicate encrypted VMs. The backup infrastructure must meet the following requirements:VM encryption in
Veeam Backup for Microsoft Azure is purpose-built for simplicity, scale, savings, and security for your Azure environment. Veeam Backup for Microsoft Azure is available as a virtual machine (VM) offer exclusively through the Azure Marketplace in both Free and BYOL editions.Here are some guides that may interest you: How to set up Veeam ONE 11 Server, What’s new in Veeam Backup and replication v11?, how to install and configure Veeam Backup and Replication 11 Community Edition with its default SQL Server Express Edition, how to migrate Veeam MsSQL Database to a new MsSQL Server, and how to install Veeam Backup and Replication 11 Community Edition with a dedicated SQL Server.Due to the Shared Responsibility Model by Cloud providers, it is evident that it is still your data and that you retain the responsibility to secure and protect it. You may want to take a look at Veeam Backup & Replication which can also enable you to centrally manage Azure backup with another cloud, virtual, phy
We know that Veeam Backup & Replication can back up virtual machines. This is one of the main functions of Veeam and it has the most features and options that we can configure. Normally, when we are starting in the backup area and taking the first steps in data protection, one of the features that ends up going unnoticed is Application Aware.So, application Aware is a function that we can configure in our backup jobs. It allows us to consistently create backup. Consistent Backup But after all, what is consistent backup?By default Veeam Backup & Replication does not perform your backups consistently. This occurs because a default configured backup job does not process a server's application logs. We must remember that Veeam backs up servers through snapshots taken in the virtualization environment. As a result, Veeam ends up not communicating directly with the operating system of each of these virtual machines. This causes Veeam to consider and perform these backups inconsistent
After my last post highlighting the Veeam software that reaches end of support in 2022, I wanted to expand this further and discuss software that Veeam works with that will be approaching end of life in 2022. Why does this matter when I’m just trying to protect the data?Times change, and software changes with them, until it’s no longer supported. At any point, a patch to an operating system, a .NET framework update, or anything else really, could end up with the software no longer being backed up properly, or not working at all in production. Without valid support there’s no process to get a fix, and whilst your backup software may still be in support with Veeam, if the vendor won’t fix the problem, it’s time to start panicking.With this in mind, lets explore the software & operating systems being declared end of life in 2022 so we can start planning our upgrades/migrations if necessary. MicrosoftWe may as well start with one of, or potentially the largest software vendor in the wo
Hi all,a new 0Day vulnerability for Windows 10 clients has been released, the article also recommends deleting all the vss restore points and recreating themSecurity Update Guide - Loading - MicrosoftCheck Windows 10 for SeriousSAM and HiveNightmare Vulnerability Fix - Virtualization Howtohttps://github.com/GossiTheDog/HiveNightmarecommad check : icacls c:\windows\system32\config\samWorkaroundsRestrict access to the contents of %windir%\system32\configCommand Prompt (Run as administrator): icacls %windir%\system32\config\*.* /inheritance:eWindows PowerShell (Run as administrator): icacls $env:windir\system32\config\*.* /inheritance:eDelete Volume Shadow Copy Service (VSS) shadow copiesDelete any System Restore points and Shadow volumes that existed prior to restricting access to %windir%\system32\config. Create a new System Restore point (if desired).Impact of workaround Deleting shadow copies could impact restore operations, including the ability to restore data with third-party backu
IntroductionVeeam Capacity Tier allows the addition of an object storage-based extent to a Veeam Scale-Out Backup Repository (SOBR). This object storage could be on-premises or could be hosted by a cloud provider. Regardless of your chosen platform, Capacity Tier provides a cost-effective way to tier backup data from on-prem 'Performance' extents to Object for longer-term storage.We encourage you to read and understand the Product documentation on Capacity Tier at https://helpcenter.veeam.comThere are a number of reasons why switching Capacity Tier vendor might make sense to you. Perhaps there was a change in your corporate strategic alliances, or perhaps a simple cost analysis has revealed that deeper savings could be found elsewhere.Switching object vendor comes with a few challenges:You need to keep your old Capacity tier around until its retention expires and you want to be able to restore from it as well. You don't have "spare" performance tier storage available and thus creating
VMware vSphere logoRecently VMware released Update 1 for both VMware vCenter and ESXi. I successfully upgraded my vCenter but had to wait on the ESXi hosts until the VMware USB NIC Fling was updated to be compatible with Update 1. It is now updated and can be downloaded from here – VMware USB NIC FlingI downloaded the fling and the Update1 ZIP file from the VMware site that I could run on the CLI of each host after enabling SSH. So I connected to my hosts via the Web UI, logged in and enabled SSH. I then used Mobaxterm to connect to each of my hosts.The steps at a high level to upgrade are as follows –Remove the current USB Fling driver from each host Reboot the host to complete the VIB removal Enable SSH again on each host Run the CLI command to process the Update1 ZIP file on each host Reboot each host to ensure Update 1 is applied Enable SSH again on each host Install the USB NIC Fling for Update 1 Reboot each host to ensure the drivers are loaded Check the Web UI to ensure the USB
Live Optics allows you, your Dell EMC technologists, or Dell EMC partner consultants to understand vital information about your Veeam environment. Live Optics provides you with a simple process to upload your Veeam database backup and present your data in a clear and understandable way, so that you can make informed decisions to optimize your backup infrastructure.Your Veeam database backup will usually be a file with a .bak extension. Sometimes, due to common community based knowledge, the files have a .dmp extension.Pre-RequisitesThe following list is are required to follow the instructions below.You are a user with Administrative access to Veeam You have downloaded the latest version of the Live Optics Collector InstructionsTo create a SQL backup for Veeam, see the following Veeam KB article:https://www.veeam.com/kb1471?destination:https://www.veeam.com/kb1471=?x-clickref=1100ld5oeEIGNote: There is no need to further .zip or compress the file. The Live Optics collector will do th
The Veeam Ready database provides a list of all partner solutions that have successfully passed Veeam’s testing criteria. Solutions are grouped by company name, Veeam Ready classification, and more. So, you can select by Alliance Partner - Model Family - Category Example: I chose by category I think it is something very useful when it comes to having any questions about compatibility and Veeam Product Release Support . https://www.veeam.com/ready.html?x-clickref=1011lbSfagY2
Nutanix has been around for sometime but I have only recently decided to take a peak at it.I am going to install a single node cluster nested in my Proxmox homelab.First step is to create your Nutanix account (free) and login. Head to the Nutanix Community Edition page by pressing launch.Press Launch under Community EditionISO and InstructionsDownload the ISO and then upload into your Proxmox. Now time to setup the VM. Create the VM Choose the ISO.ISODefault Settings You need at least 3 disks and 2 of them need to have SSD emulation turned on. The first disk can be relatively small but the other two mush be at least 200GB200GB diskLast disk for data.3rd diskIn my case I chose 4 sockets 2 cores for 8 vcpus and processor type hostCPUMemory AllocationNetworkSummaryAfter creating start the VM.StartAfter the boot screen completes eventually the Nutanix CE Installer will appear.The Use column should fill out automatically but you can edit if need be. Keep in mind that the Hypervisor boot dri
