Community

Hello everyone. Last time we explored how to identify basic file Indicators of Compromise (IoCs), develop YARA rules to detect malicious actors, and incorporate these rules into Veeam Backup & Replication to identify potential malware in our backups.Taking it a step further, today we will explore how to automatically generate YARA rules using YarGen. YarGenYarGen is a tool that generates YARA rules from a specified malware file. It identifies unique strings within the malware and excludes those prevalent in non-malicious files. This is achieved using YarGen's comprehensive database of strings and opcodes typically found in non-malicious files. Essentially, it creates YARA rules from strings in malware files while discarding those also present in goodware files

Missing application permissions: Exchange.ManageAsApp. Public folder and discovery search mailboxes will be skipped from processing, and a shared mailbox type will not be identified.I have a fully licensed version of Veeam Backup for Microsoft 365 (not the community edition) which I recently upgradded to version 8.1.  Since then I’m getting this message.  I tried to put in a support ticket but that doesn’t work so I thought I’d try here.I have already followed the instructions on https://helpcenter.veeam.com/docs/vbo365/guide/ad_app_permissions_sd.html?ver=80 where I assigned Global Reader to the Veeam App ID but I still get the error message.Useful suggestions gratefully received.

I’d like to gather as much information on hardening Windows Repos and Proxies, and have it all posted below to help others if they are looking for information on this topic.We all know the Veeam B&R Server has a security checklist which gives you very clear concise things to do for security.  There is also the LHR.  Following the DISA STIG, or using the ISO is a great way to make sure the software portion of your LHR is safe.With the above, you still have to protect the underlying hardware. Everything from physically getting at the Disk, Server Bios/UEFI, destroying the hardware, to SSH ports on a SAN, and use of MFA for logins to a SAN to prevent access. Turning on immutable snapshots and 4-eyes features on the storage pools are also great to implement. Lets not forget the VLAN for your management networks and who is allowed to see those IP’s. Even with all of this, I still don’t see specific documents for hardening a Windows Repository or Proxy server. Man

I am working on a deployment of Veeam 12.3 on Windows Server 2025 as I see there is now official support.  I am planning to use PostgreSQL, and I was wondering which version to choose.  The 12.3 ISO comes with v15.10-1.  Is that Veeam’s recommendation for Server 2025?The latest version of PostgreSQL is 17.2.  Try as I might, I can’t find any statements regarding PostgreSQL’s support for Windows Server 2025, but if Veeam support is willing to stand behind it, that’s good enough for me.Also, am I correct to assume the only way to run the DB on its own drive (D:) is a manual install of PostgreSQL before the Veeam install?

Hello All,I'm testing Veeam with my homelab Proxmox cluster. I have an issue with a worker on a node that is not reachable every other day. The backup gives a warning message. When I test the worker in the Veeam console I'm getting this message <<<<<<19/01/2025 20:42:53 Error Failed to synchronize configuration settings of the worker XXX-worker can't lock file '/var/lock/qemu-server/lock-101.conf' - got timeout19/01/2025 20:42:53 Error Worker XXXworker test failed: can't lock file '/var/lock/qemu-server/lock-101.conf' - got timeoutHere is the warning message from the emailFailed to prepare the worker XXX-worker: Failed to power on the worker VM: Failed to wait for the task UPID:XXX:0006259E:0080C27A:678CCD30:qmstart:101:root@pam: to complete; There are no available workers in the cluster. Performance may be affected; Failed to prepare the worker worker: Failed to power on the worker VM: storage 'datastore' does not e

I am trying this one more time and have had this work in the past but just wasted hours on a restore that would not boot. I have a replacement laptop a little newer and I installed veeam on the new laptop and created the usb drive. I then booted the usb and went into bare metal selected, connected to my veeam backup and recovery and selected the restore point, removed the partitions and did the restore. The restore said it completed successfully but would not boot even with secure boot off. Tried start up repair and unable to repair. I selected command prompt and I could see all of the files were there and tried some bcdrec stuff but nothing worked. I can restore a clean image and then restore my files that way but the bare metal recovery is supposed to work and obviously it is not in my case. Currently running endpoint backup version 6.2. Trying again but pretty sure it will give me the same result.

Enhancing Your Veeam Security: Key Features to ActivateVeeam Software’s R&D department has been busy the past year. It has introduced three minor feature releases (V12.1, 12.2, and 12.3), including crucial new security features and updates. If you have just installed V12 or are still on V11 and are planning an upgrade to the latest V12 release (V12.3), you may be overwhelmed by figuring out an “order of importance” for activating features.I suggest to customers moving to V12.3, or are using V12.3 but haven’t implemented any security features yet to turn on the new features in this order: Veeam Hardened repository, MFA, 4-Eyes authorization, Entropy and Indicators of Compromise scanning, and Veeam Threat Hunter. First: Veeam Hardened repositoryThe security of your backup infrastructure should start with and cente

Hello everyone,A customer of mine wants to restore the SQL backup taken on the VBR Server on a different server. There is no problem so far, but it wants to make the TCP - 1433, 1434 ports 1435 ports required in SQL Restore. Can he do this? If so, does anyone have information on how to do it?

I did a Volume restore a few minutes ago, rolling back to last night’s backup. This is a windows server 2019 environment; NTFS; prior to the restore, I had a couple dozen volume shadow copy restore points. The last one was 5pm yesterday; the nightly backup runs at 11PM. My office manger was working past 5pm, so I was forced to use the volume restore.When the restore was complete, there are no VSC restore points available. Not a big deal in this instance, but they are supposed to be there, correct? Did I do something wrong? Any ideas? 

Hello everyone, I need to change the user account that Veeam Enterprise Manager uses to connect to vSphere. The initial credentials were entered, but the plug-in hasn’t been installed yet, and I don’t see any option to modify the account after the first setup. Can anyone point me in the right direction on how to switch the vSphere user for Enterprise Manager? Thanks in advance for your help!

Hello,does anyone have experience with Infortrend EONStore GS storage systems as backup storage for Veeam?Especially as S3 storage?The systems are certified by Veeam.https://www.veeam.com/sys645https://www.veeam.com/sys1343https://www.infortrend.com/event2023/202308-gs-g3/202308-backup-solution-edm.html?utm_source=linkedin&utm_medium=social&utm_campaign=20230817backupWe are thinking about buying a GS 3060 G3 with many large disks and use it as S3 tier for M365 and capacity tier in B&R SORB.

Veeam ONE, a part of Veeam Data Platform Advanced and Premium editions, monitors your virtual and data protection environment and alerts you of issues occurring in the data center. Veeam ONE contains around 300 alarms that allow you to monitor events happening in your environment, but even with its out-of-the-box features, you may decide you want to build your own alarms for specific use cases. To do this, first, you will need to decide what ‘type’ of alarm you want to create. Multiple options are available when creating an alarm, it can be based on a backup infrastructure component such as backup servers, backup repositories, backup proxy, or a different component. You also have the added capability of basing the alarm on an object in your virtual environment.   When creating an alarm, you should know what you want the alarm to monitor. This can be based on a task or event, performance, or even in-guest processes or service. To create an alarm, navigate to the Alarm M

Hi,Let me explain the configuration and questions.Please see below.Questions:What does IP use when configuring a gateway? For the backup copy job, we have to add the target repo from Storeonce B as COE because of the replicate over IP. How do we force replication between StoreOnce A and B on replicate IP ?DC site :Veeam backup server (KVM) Mgmt IP Proxy & GW server A (Windows server 2022) Mgmt IP backup IP  Fiber Channel StoreOnce A Mgmt IP  backup IP Replicate IP Fiber Channel DR site :Proxy & GW server B (Windows server 2022) Mgmt IP backup IP Fiber Channel StoreOnce B Mgmt IP backup IP Replicate IP Fiber Channel

I am confused (not an unusual occurrence). I had to do a restore of a VM to a different backup repository from tape, so I could search for some files for a user. Now, I don’t need that restored image. (this repository is a Windows disk drive, and the restored image is 4TB in size). So I’d like that 4TB disk space back, please. :-)Is there a special procedure for cleaning that off the repository? Or do I just delete it from Windows, like any other set of files?  

Hi everyone,recenly i’m doing some test on the veeam backup&replication community edition on my Dell R710 which is running server 2019 standard. And at the first time, i can add a hyper-v server which is running server2019 (standalone) to the backup job, but once i deleted the job, i cannot add any hyper-v again.It always shows :Failed to connect to host 10.178.3.41Access denied or timeout expired. (sometimes is invalid namespace)Check if you have local administrator privileges on computer '10.178.3.41'.Possible reasons:1. Invalid credentials.2. Specified host is not a Hyper-V server.================what i did for this issue:https://www.veeam.com/kb1914

I have a vCenter at a remote datacenter which is serviced by its own storage array and physical proxies for direct san backups. The repository is located in the main campus datacenter and i need to encrypt those backups. I have been using job encryption, but those dont compress/dedupe. Can I use Networo k Traffic encryption for this? The documentation says I can encrypt between “backup infrastructure components”. If I specify the proxy servers at the remote datacenter in the job does that mean I could encrypt from “proxy at remote campus” to “sobr at main campus”?  In the Source IP address range section, specify a range of IP addresses for backup infrastructure components on the source site. In the Target IP address range section, specify a range of IP addresses for backup infrastructure components on the target site.

Agent For MAC Deployment always via catch-all protection groups•.pkg file for installation•Install with double-click or 3rd party software management solution*•Full Disk Access (FDA) must be allowed in both cases   Full Disk Access:  Manual ConfigurationGo to “Settings –Security & Privacy –Full Disk Access”  Check Profile On MacOS 

Today’s #VMCE2020 #DailyQuiz walkthrough is ready. How often do you use the VeeamZIP feature? What are your use cases? Has UAC causes you issues when enabling application-aware processing in backup jobs? 

In case you missed it, a while back @tsightler presented an amazing webinar Building SecureLinux Repositories.The main topics covered in the presentation are:Securing the host system Isolating Veeam processes Levaraging snapshots Automated deploymentBONUS! Tom also does a side-by-side comparison of Veeam fastcloning on XFS vs ReFS!While Tom presents top content, I think one of my favorite parts was coverage of the fail2ban tool (at 41:47 timestamp).

Hello everybody!I would like to test performance on Linux repositories.The idea is to test read/write performance on disk, IOPS or something like that. I found the KB2014, but I would like to know if some of you have already do this before or if you have some tip or indication for this.  

Dear All,                I have recenty deployed VBR Azure appliance throught the veeam wizard, and after i powered off the azure vm and i changed the size from B2ms to b1ls, and after powered back on and i open the console at Veeam, and it seems doesn’t find the azure anymore, just wonder it is not ok to change the size of the vm ? any help would be appreicated Keith

Hi,We currently do a full backup weekly that is then updated with incramental backups daily that are retained for 7 days.I am concerned about malware going undetected (we have AV, I’m just paranoid). Is a 7 day retention policy for restore points good or should I expand this? What archival rules would help would be recommended?Many thanks in advance,Tobi

Hi, my first experience backing up a volume on my Ubuntu 20.04.6 LTS Linux machine is resulting in a Snapshot overflow error.  I use Veeam B&R Community Edition Build 12.1.2.172.  Here are some details:Veaam R&D machine: Dell PowerEdge R7515 OS: Windows Server 2022 Standard. CPU: AMD EPYC 7232P 8-Core Processr 3.09GHz RAM: 32 GB Backup Disk E: has 65.5 TB capacity with 9 TB free (This disk is the default backup repository) Protected computer: Dell PowerEdge R550 OS: Ubuntu 20.04.1 CPU: Intel Xeon Gold 5317 12-Core Processor 3GHz RAM: 64 GB Backup Mode: Volume level backup Objects: /mnt/data as the only mount point (ext4 with about 7.7 TB of content with total capacity of 65 TB, which means it is 87% free)Multiple backup attempts were made and they all failed with the same Snapshot overflow error. Furthermore, I have studied the protected computer requirem