News, guidelines and various community projects
We are proud to announce the release of our first joint Legends project: Veeam Backup & Replication Pocketbook v1.It is a collection of best practices from the field.The following topics are covered:Backup Basics Security Hardened Repository and Immutability Performance SOBR Capacity Tier Offload SureBackupWe are discussing each recommendation with benefits, disadvantages and links to more information. Currently the Pocketbook can be downloaded here as a pdf-file. We are looking forward to your feedback!Enjoy reading! Contributors (in alphabetic order): @falkob, @Geoff Burke, @JMeixner, @Link State, @MicoolPaul, @regnor, @vNote42, @wolff.mateus
Following the line of some of my topics, in Veeambp.com we can find a very useful unofficial tool This tool is not Veeam supportedIt was developed externally and is not linked with Veeam Software or ServiceNow in anyway, No support is offerred or inferred from Veeam Software on this tool. vSnow App is an application to integrate Veeam Backup Enterpriser Manager with ServiceNow vSnowApp for ServiceNow:The application offers integration with Veeam Enterprise Manager.vSnowApp provides following capabilities:Performance Dashboard Incidents Management Manage Backup Jobs. Failover Plans Agent Jobs Backup Servers Management How vSnowApp Works: vSnowApp function as an intermediary between Veeam Enterprise Manager and ServiceNow, after you deploy the vSnowApp, you can manage reporting and management of backup infrastructure from ServiceNow. Pre-requisites:ServiceNow MID Server Veeam Enterprise ManagerSupported ServiceNow Instances:New York Orl
For those who don’t go to the VMware forums (another ‘communities’ based vendor website) often, there was finally a VMware employee who somewhat unofficially acknowledged the issue of running ESXi on SD cards, specifically with vSphere 7U2. I say U2 because v7 and v7U1c, of which I both have run on DELL IDSDMs, runs flawlessly; and has for the past year.To read a little more on the issue, you can review the VMware Communities post here. The issue, it seems, has to do with their newly formatted boot partitions. But honestly, I think the mishap (Hosts disconnecting/hanging) is mostly due to a new vmkusb driver. VMW is currently working on a fix, though they’re really recommending orgs to start using ‘high-performance’ storage (i.e. disks) for the boot device moving forward. All that to say is, if you haven’t upgrade to 7U2, I recommend not to. If you’re running your boot on disk, I think you’ll be fine. Otherwise, hold off. One of the Veeam Vanguards, Luciano Patrao, did a nice little p
Veeam Backup and Replication is comprehensive data protection and disaster recovery solution which is capable of creating image-level backups of virtual, physical servers, cloud machines, and restoration as well. The technology used in the product optimizes data transfer and resource consumption, which helps to minimize storage costs and the recovery time in case of a disaster. Veeam Backup and Replication provides a centralized console for administering backup, restore, and replication operations in all supported platforms (virtual, physical, and cloud environments). The prerequisite requires you to have a SQL Server already running in your environment. Please see "how to download and install Microsoft SQL Server 2019 Express Edition and Microsoft Management Studio on Windows Server", how to install Microsoft SQL Server 2019 and MsSQL Command line tools on Ubuntu Linux, and how to install MSSQL Server 2019 Developer Edition and SQL Server Management Studio on Windows. With Veeam Back
Are you interested in the Veeam Legends program? Now’s your chance to become legendary! We will soon be selecting and announcing the second Veeam Legends intake, and there is still time for YOU to contribute!Ways to engage:Blogs and podcasts: Bring your knowledge and expertise to the Veeam community. Never blogged? No worries; you can still contribute. The Veeam Community Hub is open to everyone, whether you are a beginning or experienced writer. Discussion boards: Join discussions about Veeam community projects, Veeam events, the industry and technology news. Veeam User Groups: Connect with your local Veeam community, share experiences, learn from your peers and expand your network! Check out upcoming events and VUG meetings near you. R&D Forums: Join technical discussions about Veeam products with the Veeam R&D Team and submit feature requests! Make sure to add your R&D Forums nickname into your Community Hub profile so all your contributions will be scored.Before we anno
Backups of VMware vSphere VMs can be done with one of three transport modes. Each of these modes also provide the possibility to restore data. This post is about 3 reasons why direct SAN restore failover to NBD. Incorrect VMDK typeVeeam can only perform direct SAN restore with thick provisioned VMDKs. If any disk of a VM is thin provisioned, restore will not leverage SAN directly. Both, thick eager and lazy zeroed are supported. In my experience, eager zeroed is much faster from a restore point of view! So I recommend, to use this format.Note: you should not rely on the provisioning type you chose at VMDK creation: Thick provisioned disk can become thin if it is expanded.Fortunately, Veeam provides the possibility to change disk type in restore wizard. So you can be sure to use thick VMDKs when you enter this within the wizard. See here in Full VM Restore wizard:And in Virtual Disk Restore wizard: Disk is logically locked in Veeam proxyIf your Veeam proxy server is Windows based, it
Hello everybody!Today I’m coming to talk about archive backup with blob Azure.Archiving is good option to save money with your full (GFS) backups. It means that you can save your backups as archive instead of traditional hot/cool blob of Microsoft Azure.To do that you need configure a Scale Out Backup Repository with the Archive Tier enable.After that you can move your full backups older than X day to this kind of archive, as this example: But first you need to configure your blob repository as an archive option. To do this go go to Backup Repositories inside Backup Infrastructure menu. Right click on the pane and chose Add backup repository… On this screen chose Object Storage: On the next step choose Microsoft Azure Blob Storage option: After that click on Azure Blob Storage Archive Tier: Type Name and Description of your archive blob: Enter with your Credentials for this blob and chose what Gateway Server will be used for this function: On the next screen you just need to set what C
Hi Veeam Community, Now it’s time to have a serious conversation, as they are BACKKK!VeeamON 2021 Update is your chance to step up your modern data protection AND your sneaker game. We’re giving away custom Veeam sneakers and YOU have a chance to win!Follow these simple rules: Register for VeeamON 2021 Update Share photo of you wearing your current kicks in the comments of this post Let us know WHY you need a veeamazing upgrade The nastiest sneakers you got the better. We need a SERIOUS reason for upgrade. Let us laugh together!Make sure to join us on Oct. 13 or Oct. 14 where we’ll announce the eight winners.The contest is open now through October 6th. For more details, visit: https://bddy.me/3D1wrVT
Hello everyone! Just a silly question here. Look for this datastore on my lab environment: As I remember this datastore is used by Veeam during the Instant VM Recovery process acording with vPower NFS right? However, in this right moment I don’t have any IR job running.Is it correct having this datastore mounted on ESXi everytime?
Greetings everyone, as you know I have been working on Grafana Dashboards across all Veeam RESTful APIs (the only one pending is VBA GCP), but as the time has passed, the releases and core products I was using have evolved as well…I am talking about the time-series I am using to store all the recollected data from the APIs. I was using InfluxDB v1.x (latest stable release is v1.8), but InfluxData is about to deprecate it and consider it end-of-life at the end of 2021. That left all the Community using it with the only option to go to InfluxDB v2.x, and start leveraging Flux, the new query language, which is extremely versatile btw.Introducing the new Grafana Dashboard for Veeam Enterprise Manager for InfluxDB v2 using Flux, and Grafana 8.xBefore go any further, I just wanted to thank tigattack who contributed to the Script that pushes the data to InfluxDB v2.0.Now, there it has been ton of work, as I needed to craft all the queries again from scratch converting legacy InfluxQL things l
VMware vSphere 7.0 U3c is released today, this version can resolve some critical issues. Please check the followings.For Log4j issue on vCenter 7.0, vCenter 7.0 U3c can resolve this issue.https://www.vmware.com/security/advisories/VMSA-2021-0028.html vSphere 7.0 Update 3 Critical Known Issueshttps://kb.vmware.com/s/article/86287
Today Veeam have launched the new Veeam Backup for Office Microsoft 365 v6! That’s right, it’s had a slight name change to align with Microsoft’s rebrand of Office 365 to Microsoft 365. Excited and want to check it out? Download it here. Veeam have also updated their Helpcenter ready to explain all the new features. As always, Veeam have accompanied this release with a set of release notes, available here.In this blog post I’ll be going over the key new features and also any key insights to be aware of as part of deploying Veeam Backup for Microsoft 365 v6 or upgrading to v6 from an earlier version. Key Information Veeam Backup for Microsoft 365 Server:Straight away, I want to highlight that the CPU requirements have changed. Veeam are now recommending 8 cores as the minimum for v6, up from 4 cores in v5.It’s the same story for RAM, v6 now requires 16GB as a minimum, up from 8GB. There is a discrepancy between the release notes and the Helpcenter documentation with regards to VMs wit
I’m currently running the 30-day trial version of Office 365 backup (220.127.116.11) and everything has been running well for the last 10 days or so. I have the software set up to run every 8 hours for a whole organization backup. Out of the blue, last night, the backups started failing with “Access denied. The remote server returned an error: (403) Forbidden”The admin password is the same and Azure AD shows the login for the Veeam account as successful. I’ve checked our Office 365 Health panel and see nothing new that might impact the backups. I’m running a backup to a local repository and have rebooted the backup server and the proxy server. I have plenty (4.8+ TB’s) of storage available on the repository. I went into the Organization setup and reentered the credential info and all of the checkboxes came back as successful. Has anybody else encountered this issue or does anybody have any hints for how to alleviate it?
Hi all, Everyone that knows me knows that I am a massive Python geek and data science nerd outside of being a full time nerd. Anyway I’ve been working on a YouTube series on using the Veeam API with Python showing the long way and the easy way to connect, discover, manipulate and visualize data from the APIs.I will be doing deep dives later in the series as well as creating interesting apps and widgets with one of Python’s many libraries. I’ll also be branching off into other languages like C# and Golang overtime.The GitHub repo of all the Jupyter notebooks I am using in the series can be found here:https://github.com/shapedthought/veeam-api-and-python-youtube If you have any suggestions for reports or visualisations of data please let me know and I’ll try work them into the series.
PetitPotam attack on Active Directory Certificate Services: How to mitigate NTLM Relay PetitPotam attacks on AD CS
Recently, Lionel Gilles, a French-based Offensive Computer Security researcher based in Paris, France published a PoC tool on NTLM Relay Attack known as PetitPotam that exploits the MS-EFSRPC (Encrypting File Services Remote Protocol). PetitPotam is a classic NTLM Relay Attack, and such attacks have been previously documented by Microsoft along with numerous mitigation options to protect users. Here is an example of such documents: NT LAN Manager: How to prevent NTLM credentials from being sent to remote servers. Below are some related guides: Active Directory Authentication methods: How do Kerberos and NTLM work? how does cached domain logon work?, and What is Pass the Hash Attack and how to mitigate the attack. PetitPotam takes advantage of servers where the Active Directory Certificate Services (AD CS) is not configured with protections for NTLM Relay Attacks. The mitigations below outline to customers how to protect their AD CS servers from such attacks and help in mitigating the W
ReFS (Resilient File System) is a file system by Microsoft that provides - since Windows Server 2016 - a feature named Block cloning. Basically it uses pointers to already existing blocks instead of copying or re-creating them. This saves time and disk space. Veeam uses this feature for synthetic operations like merging incremental backups with full or synthetic full.In my opinion Microsoft does not offer a proper utility to analyse ReFS space savings with Block cloning. I think there are at least three ways to show the space benefit of Block cloning:Windows explorer Application that makes use of Block cloning Timothy Dewin's blockstat.exeWindows explorerThe native way to calculate saved space is to simply compare the sum of all files in a partition to the used space of the same partition. Because the partition view includes the space savings and file view does not, the difference shows saved space.As you can see, there are about 44,4 GB space savings. Keep in mind, the properties of t
Hello, In this article, I will talk about Veeam Direct Restore to Azure feature. What is Direct Restore to Azure? Included in Veeam Backup & Replication ™, Veeam Direct Restore to Microsoft Azure allows users to import and restore on-premises VMware and Hyper-V virtual machines, physical servers, and endpoints to Microsoft Azure. Restore Microsoft Windows and Linux-based virtual machines, physical servers, and endpoints with Restore to Microsoft Azure. Today's modern data center is not limited to the location of the physical data center. IT organizations can optimize resource allocation and further improve operational scalability and efficiency with the Microsoft Azure cloud. With Veeam Direct Restore to Microsoft Azure, administrators can restore and migrate physical (P2V) or virtual (V2V) workloads to Azure without the need for complex configurations or additional hardware investments, thereby minimizing operating expenses. Quickly restore workloads to Azure Quickly and efficient
When it comes to protecting your business against Ransomware, there are three critical components of a successful strategy. Any solution that you're going to rely upon must have all three of these attributes: Simple Immutable Fast The combo of Veeam Backup and Replication alongside SafeMode snapshots on Pure Storage FlashArray//C is uniquely capable of delivering on all three of these critical requirements. SimpleWhen it comes to data protection, it's easy to let your guard down. The best solutions are the ones that don't require constant care and feeding. They are simple to set up and simple to maintain. Veeam and Pure have each built a solid reputation on designing products that are intuitive and easy to use. Veeam backups made immutable by FlashArray SafeMode are "set and forget" simple. This simplicity comes in part due to the fact that you don't have to change a thing about your Veeam deployment to enable SafeMode protected backups. SafeMode protects the entire Veeam Backup Re
If you do no know much about Hardened Repository in Veeam VBR v11, read here to learn more about:I was asked, if a hardened repository can be a extent of a Scale Out Repository (SOBR). Good news: yes it can! But you have to take some facts into account.Hardened repositories can be Performance Tiers of SOBR. A SOBR can contain a mix of repositories: ReFS, XFS, Immutable and mutable. Even in mixed SOBR, Performance Placement Policy can be set. That leads to, for example, immutable increments and mutable fulls. When you mix, for example, ReFS with immutable extents, you can use Evacuate backups to free an extent. I would not recommend any points 1 - 3!In my opinion the point 4 is the most important. With evacuating an extent you can easily migrate from ReFS to XFS with immutability.Notice: If you evacuate an immutable repository, Veeam performs a copy, not a move operation! Which makes perfect sense! When backups are evacuated to a hardened repository, files will be immutable as long as
Good day all, hoping to find someone who has either seen this or may know where I could start to troubleshoot (I'll open a ticket with support as well, just hedging my bets here). We've used Veeam for server/VM backups for a few years and it's awesome.For workstation backups, we've used Carbonite (don't ask, we've tried to get rid of it in the past but got shot down by higher ups/non administrators) but it has been decided that we're not going to renew this year (got about a month left on our annual term).Over the last year, I implemented OneDrive KFM so that our desktop and documents folders are resilient and more "portable", which has made our hardware swaps much smoother and reduced the need for Carbonite.But I digress...while nobody actually said to go find a replacement for Carbonite (it seems to be the thought that OneDrive KFM is a replacement for backups,.which I know it's not), I am looking into alternatives, and Veeam would seem like the logical choice. So I've been doing som
Today I want to share a sneak peek at the next release of Veeam Backup for Microsoft 365, v6a. Like traditional minor/interim releases, this release will mainly include bug fixes. However, there’s an interesting feature being released that I’ll be sharing some details on. Goodbye Exchange, Hello Teams Export APITo understand what’s changing, we need to understand what is going, and why this change is necessary. Currently, Veeam are protecting Teams channel ‘chat’ data via Exchange Online. Notice I say Teams channel, currently Veeam doesn’t protect any ‘Direct Messages’, either 1:1 or group chats, so chat in this context refers to posts and comments within a Teams channel. How does Veeam currently process my Teams data?To achieve the protection of this Teams data, Veeam reads a hidden folder within Exchange Online, called ‘TeamsMessagesData’. This is true whether you use Basic or Modern Authentication.If you weren’t already aware, Microsoft are completing removing Basic Authentication S
In case you missed it, a while back @tsightler presented an amazing webinar Building SecureLinux Repositories.The main topics covered in the presentation are:Securing the host system Isolating Veeam processes Levaraging snapshots Automated deploymentBONUS! Tom also does a side-by-side comparison of Veeam fastcloning on XFS vs ReFS!While Tom presents top content, I think one of my favorite parts was coverage of the fail2ban tool (at 41:47 timestamp).
Veeam Backup & Replication supports and understands vSphere tags allowing the creation of Backup and Replication Jobs by selecting VMs to backup based on Tags.Tags concept was introduced in vSphere 5.5 and basically it is a label you can assign to any object (VMs, storage and so on...) in the vSphere inventory. You can assign a tag to a specific category to better identify a VM type or simply the installed OS.The use of Tags during Jobs configuration is pretty easy to configure. In the configuration wizard click Add button to add objects to backup. Click the tag icon to display VMs and Tags, select the item you want to include in the job then click Add.Using Tags you no longer need to edit a specific Backup or Replication Job to add or remove a VM. A simple click in the Tags panel of the particular VM in vSphere Client does the trick.No Backup tag?... why you should use it? Well, the No Backup Tag can be used to specify which VMs are not included in any backup on purpose. In big en
Login to the community
Log in with your Veeam account
Enter your username or e-mail address. We'll send you an e-mail with instructions to reset your password.