Community

 Hi everyone I'm sharing this kind of configuration aimed to strengthen the security of immutable data backup against ransomeware attacks or possible 0 day \vul of the O.S. Linux used to deploy a Hardened Repository.Thanks to Veeam, it is now possible to perform immutable backups via Hardened Repository.This technique aims to safeguard the databackups saved on Raw LUN Volumes of a storage in “Locked Volume” mode on Hardenend Linux based repositories.The combo is to use the Hardened Repository to which present a RAW LUN Volume formatted in XFS to support block cloning, in this case Infinidat + the functionality/utility Snaprotator, allows to schedule a snapshot of one or more Volumes in "Locked Volume" mode.Tested also the restore, re-presented the Snapshot Volume on the Hardened Repository, the only trick is to force the change of the UUID of the Raw Lun, if not it is not mountable by the O.S. because of duplicate UUID.InfiniBox SnapRotator User Guide – INFINIDAT Support Find out if yo

Hi everybody!I would like to share will all of you a little story,For almost a year, we were doing this "none written" rule, and it's being adopted by the whole department:"READ-ONLY MONDAYS"Tired of deploying things and changing production things on Mondays, tired after the weekend, and many people coming back to the office with tons of issues, after working from home on Fridays, we took this decision so we were able to fix and take care of the "after the weekend" issues, not adding extra failure points to the day.Now we are thinking of improving this rule to Mondays and Fridays!What do you think?Do you have any "none written" rules you would like to share?Many thanks. 

VEEAM integration APIs can be combined with other market solutions    

Morning, Just a quick one from me today I wanted to share.I was playing with VDRO, and scratching my head as I was playing with restore plans, but I couldn’t find a very crucial step. ‘Prepare DC for DataLab’. It’s documented here: Prepare DC for DataLab - Veeam Disaster Recovery Orchestrator User GuideI’ll quote the key text as to why we need this:This step is required for a domain controller to be started in a test lab environment. This must always be the first step for the domain controller in a lab group.This step ensures the VM will reboot to exit DSRM (Directory Services Restore Mode) and therefore will function correctly as a domain controller in the lab. Seems pretty important right?Well, when I went to create my restore plan, I couldn’t find it, even the Veeam documentation doesn’t show it within the list:After a lot of head scratching, turns out, I was missing something that is a bit light on helpcenter documentation! You need to define this at the DataLabs level:Once added,

Hey all, help me create sop for how to take my on-primies backup to aws s3 and restore aws s3 to ec2. 

Hi Folks, VeeamON 2022 is coming up fast. Recently a video was put out that caused quite a stir. Veeam’s marketing department let a notorious Anti-Swagger slip through into one of their promotional videos for VeeamON. The repercussions have been quite serious and the upper hierarchy at Veeam are even discussing a ballistic Paddle Board swag response. He is second to last in the video . VeeamON is never dull!!  

Today I’ve noticed that Veeam have released the full upcoming agenda for their premier data protection event: VeeamON 2022!I just want to talk through some of the personal highlights I spotted from the agenda.Hands on Labs (Virtual & In-person) Veeam Backup & Replication v12That is not a typo, Veeam must be feeling pretty confident about the shape of v12 by now as next month they’ll be allowing hands on labs of this unreleased product. Check out the description below:In this lab, you will be working with a Veeam Backup & Replication V12 environment where you will learn the basics of Veeam Backup & Replication, test out some of our upcoming new features, and perform typical Veeam backup operator tasks though an interactive step-by-step lab guide.I can only speculate as to what upcoming features will be available to test, but I’m looking forward to seeing what Veeam have been cooking up since v11 launched last year. Veeam Backup & Replication with Immutable Linux Hard

Hi, What we have:A Protection Group (protection-sql) containing SQL Server Cluster: sql_c01 with two sql Servers. sql1 and sql2 I have one agent Backup Job bj-sql-01 , Type “Failover Cluster”. Useing a sobr with aws capacity and archive tiers.  Anything is working absolutely fine. Backup ist fine. Offloading is fine. Whats going on:Both sql servers will be renewed. There will be two new sql server. sql1-new and sql2-new (agent already installed) After installation, both new sql servers will useing the same SQL Server Cluster sql-c01 sql1 and sql2 will be turned off.My Accepetion:Should I build a new backup job (clone) or is it possible to keep the existing backup job. bj-sql-01 ?I would manually initiate a Protection Group rescan. The new sql-server should appear in the Protection Group protection-sql the OLD sql server should disappear, because they do not belong to the sql cluster anymore. The existing backup job should recocognize the missing sql Server but will continue backup the

 Hi all, I share the lab I created to test the CDP feature.HW List:VmwareServer: 4 UCSC-C220-M5SX - VMware ESXi, 6.5.0, 15256549 VCSA 6.7.0 15129973 Storage: Dell Storage SC 5020 VBR+CDP-Proxy Source 1x4 vCPU – 16 Gb RAM CDP-Proxy Target 1x4 vCPU – 16 GB RAM System Requirements - User Guide for VMware vSphere (veeam.com) Requirements and Limitations - User Guide for VMware vSphere (veeam.com) Backup Infrastructure for CDP - User Guide for VMware vSphere (veeam.com)Deploy & Configure  CDP proxy VBR on source & target Vmware datacenterDeploy & Configure  CDP proxy on Target DCInstalling I/O FilterInstalling I/O Filter - User Guide for VMware vSphere (veeam.com)KB4096: VeeamCDP I/O filter installation fails with “The agent’s workflow is blocked” erroresxcli software acceptance set --level CommunitySupported on all your Esxi.07/10/2021 10:53:39 Error    Installing CDP components on cluster: CDP-Source... Error: The operation is not allowed in the current state.The operation is

Most of you probably already know or have heard this statement: Snapshots are not backups! Just last week a German hosting provider did lose 1500 snapshots because of failing hardware. And who hasn’t experienced some horror stories about (forgotten) VMware snapshots. Because of that I wanted to highlight this with a dedicated blog post. What is a snapshot? In general a snapshot is a frozen point in time state of a certain system or data. While we're often referring to snapshots in case of virtual machines, there are other variations like storage or file snapshots. For virtual machines, snapshots set the virtual disks to read only state and redirect all changes to a different disk file(the details may differ depending on the hypervisor). They can be used for quick rollbacks or during VM backups. Normally those are only created temporarily(or at least the should). Storage or file snapshots can be used for versioning and can also be replicated to different systems; those tend to have a lo

Hi guy update April 2022 for fix RPC vulCVE-2022-26809 - Security Update Guide - Microsoft - Remote Procedure Call Runtime Remote Code Execution VulnerabilityHow could an attacker exploit the vulnerability?To exploit this vulnerability, an attacker would need to send a specially crafted RPC call to an RPC host. This could result in remote code execution on the server side with the same permissions as the RPC service.Why did Microsoft remove the Mitigation to “Block TCP port 445 at the enterprise perimeter firewall”?The researcher who submitted the vulnerability used SMB as the attack vector to trigger the exploit in the RPC service, so the mitigation was effective for the issue that was presented to us. Although blocking ports 139 and 445 [smb] at the perimeter firewall is a recommended practice, it does not directly protect against all potential attack scenarios for this specific vulnerability. At this time we are not aware of any other specific attack vectors for this vulnerability,

You can think what you want about Facebook, but they operate a massive amount of compute and storage unites. And it seems, they have some scientist investigating interesting phenomenon like this. To be honest, it is not primary backup related but in the second instance it is restore related 😀Briefly summarized:They found out, CPU can perform computations incorrectly. So it comes to silent data corruption by CPU. According to their observations these failures are reproducible and not transient. When you think about data-reduction technologies like compression this really can cause problems. As the following article describes, these corruptions occur at scale. Interesting is also how they test their hardware.Read more details here:https://blocksandfiles.com/2022/03/18/facebook-investigates-silent-data-corruption/

Hi,Can anyone guide me for the best practise while configuring Protection Group options. Hereby attached file, please advise as to which options are to configured for best performance.  Manish

I have been a Veeam Vanguard for five years now and was fortunate enough to have attended the VeeamON 2017 event in New Orleans, and it was fantastic.  Great sessions, lots of networking and meeting more of the Veeam folks as well as Vanguards.Being a Vanguard is a real honour, and many people ask me when they see my Veeam Vanguard jacket or shirt - What is Veeam?  My answer is a typical one - it is backup software for your infrastructure for now and the future, leading to a conversation around technology, backups, and many other things.This year's event is back in Las Vegas in the hybrid mode with in-person and virtual attendees.  It will be the first event since 2019 in Miami that will be back to live attendance which is a great thing.  In the last couple of years, with the COVID pandemic, the switch to all virtual has left many people feeling disconnected, including me, so getting back to being able to speak to people and share technology stories will be great.One other great benefi

I try to backup a VM Machine on hyper-v but i get error: 20.04.2022 10:56:18 :: Processing DC-01 Error: There are no available IP addresses to connect to Hyper-V Integration Service.   How can I solve this, with anoter hyper-v server it works. Thx Peter

Tape consumes 87% less energy and produces 87% less CO2 than equivalent amounts of HDD storage. When analyzed over the total product lifecycle from procurement of raw materials to production to distribution to usage and finally disposal, tape produces 95% less CO2 than HDD and produces 80% less e-waste. https://datastorage-na.fujifilm.com/sustainability/

Hi,Can anyone guide me as to how to take backup from QNAP using Veeam B&R community version. I tried various ways such as create protection group but it is not able to install veeam agent and likewise but not able to configure.Please adviseManish

The LTO Program Technology Provider Companies (TPCs), Hewlett Packard Enterprise Company, IBM Corporation and Quantum Corporation, today released their annual tape media shipment report, detailing year-over-year shipments through the fourth quarter of 2021. The report reveals 148 Exabytes1 (EB) of total tape capacity (compressed) shipped in 2021, marking an impressive record year for the LTO Program. With a growth rate of 40%, this strong performance in shipments continues following the previous record-breaking 110 EB capacity shipped in 2019 and 105 EB of capacity shipped in 2020 (during the pandemic). https://www.businesswire.com/news/home/20220419005174/en/LTO-Tape-Capacity-Shipments-Reach-New-Record-In-2021

Hi,Since I am new to Veeam B&R, I faced an issue that if I close Veeam B&R app will the backup jobs schedule will execute or not ?Because I observed that after clsoing the app Backup was not executed.Please advise Manish

Hi,I recently started using Veeam B&R community version. Successfully taken backup, now I want to know as to how to restore the data. Manish

Hi,Hereby attached backup job screenshot, can anyone guide me the options to be configured as best practise.Manish

Hi Folks, This is a short but informative course on API security. API’s are everywhere from Enterprise Manager to Kasten so good to have an understanding about them. There are some other free courses there too more in the security dept.  https://academy.wehackpurple.com/collections?category=free-courses

Git has released a new verson to address some security vulnerabilities, As reported, we are aware that GitHub is affected. But there is a need to upgrade your local installation of Git, especifially when you are using Git on Windows or on multi-user machines. All credit goes to to 俞晨东, and the fix was authored by Johannes Schindelin. CVE-2022-24765As stated in this article, this vulnerability affects multi-user machines, Git users might find themselves unexpectedly in a Git worktree, e.g. when another user created a repository in C:\.git, in a mounted network drive or in a scratch space. Merely having a Git-aware prompt that runs git status (or git diff) and navigate to a directory that is supposedly not a Git worktree, or open such a directory in an editor or IDE such as VS Code or Atom, which will potentially run commands defined by that other user. Vulnerability ImpactSince part of Git for Windows’ uninstaller is copied into the current user’s temporary directory and run in that pla