Community

Greetings, everyone! Today we'll delve into the art of identifying basic file Indicators of Compromise (IoCs), crafting YARA rules to sniff out malicious actors, and seamlessly integrating these rules into Veeam Backup & Replication to safeguard our backups against potential malware threats. But before we dive in, let's take a moment to understand YARA and what its for. YARAYARA is an open-source malware classification tool used to identify and classify malware or suspicious files based on its signatures or rules. It is a powerful and flexible tool that allows users to create rules matching their organization’s needs or targeting specific threats. Moreover, YARA rules are like a piece of programming language, they work by defining a number of variables that contain patterns found in a sample of malware. If some or all of the conditions are met, depending on the rule, then it can be used to successfully identify a piece of malware. Indicators of Compromise (IoCS)Suppose one day a us

World Backup Day is March 31 … April Fools Day is April 1 … So, for our April 2nd Livestream, we’d love to highlight as many crazy, chaotic, or startling backup or recovery challenges, successes, or failures, that you’ve personally experienced.   We won’t be saying full names or companies, so feel free to submit anonymously – but if you have a short story that others can learn from, we’d love to share it. So, either grab your phone, turn that camera around, and record a 15-60 second clip of some of your most challenging backups or recoveries OR write down your story.  Either way, upload your written or recorded story to https://veeam-wbd24.portal.massive.io.Then tune in April 2nd as we laugh and cry about them together. -- JBuff Ps, turns out this idea isn’t as original as I thought, as some of you are also already submitting a similar story for the Blog of the Month contest.  So now you have two reasons to tell us your best or worst stories!

Hey Everyone,VMware has recently rolled out the newest iteration of ESXi, version 8.0.2b. Among its fixes of fixes and enhancements, one particular fix should be called out: addressing an issue related to Changed Block Tracking (CBT) and virtual machines with a hot extended virtual disk.  In vSphere 8.0 Update 2, to optimize the open and close process of virtual disks during hot extension, the disk remains open during hot extend operations. Due to this change, incremental backup of virtual disks with CBT enabled might be incomplete, because the CBT in-memory bitmap does not resize, and CBT cannot record the changes to the extended disk block. As a result, when you try to restore a VM from an incremental backup of virtual disks with CBT, the VM might fail to start. For more information and to get the bits, head over to the release notes page of 8.0.2b.

I have customer with two veeam servers and we want to de-mote one to just be a proxy. As we transition, could the 2nd veeam server also be a proxy for the main veeam server while we test all backups from the main server. Once all looks good then we can uninstall B&R and just run that host purely as a proxy.thoughts?

Hi All,We are designing a new Veeam Backup Solution. This will be a hardened solution with Linux OS on REPO Server for immutability Snapshot integration will be setup for Veeam to backup from NetApp Snapshots Solution will consist of virtual VMware proxy servers, 1 physical server as the repository server with RHEL installed, iSCSI connected Storage Area Network (SAN) Storage to provide the Repo storage to this RHEL physical serverWe need to understand the Storage Area Network (SAN) Storage requirements such as how much RAM, CPU that SAN should have on the 2 controllers? The Physical RHEL repo server will have 128GB memory, 2 x 18 core CPUs and can see the sizing detail for this in the vse sizer, however have not been able to see sizing around the SAN and the RAM/CPU they should have as we dont want to be in a position where the SAN Controllers are struggling. Thanks, 

Hi! Our Object First appliance just arrived, and we are preparing to install it in our lab environment. It´s a beautiful object storage 😊Derek also received an appliance and will write a series of posts about tests and performance. I will share my impressions here. Looking forward to the series! 👏🏻  

Before installing Agent for Windows 6.1.0.349, unlicensed, I’d never seen a “Job HOST_1” created. That’s on something like seven years and two or three Windows 10/11 clients running the free agent every night. Since installing 6.1.0.349, I see these created by one or more of the three clients most night. One client is Windows 10, two are Windows 11, all target a Synology Diskstation over SMB, one via Ethernet connection and two via WiFi.These started showing up the first night after installing the Agent update.I’ve deleted or relocated the _1 job folder on the server, and then edited the job on the client to map it back to the “Job HOST” backup set. It says HOST is already using the backup Job HOST. I say OK. Happiness is restored, the job runs as expected, and all is good until I go looking for Job HOST_1 folders the next morning. Rinse and repeat.Any suggestions?

For any NetApp ONTAP or Lenovo ONTAP fans. Veeam has qualified ONTAP 9.14.1 GA with Veeam Data Platform 12.1. One of the features I was waiting for was ONTAP S3 with Object Lock for ransomware protection. Unfortunately this did not work for me see screenshot below. I have reported it to NetApp. They told me that it could be fixed in an ONTAP 9.14.1 “P” release. The non object lock version still works😀.   Veeam Documentation link for NetAppNetApp FAS/AFF/ASA, FlexArray (V-Series), ONTAP Edge/Select/Cloud VSAhttps://helpcenter.veeam.com/docs/backup/vsphere/system_requirements.html?ver=120#netapp-fas-aff-asa--flexarray--v-series---ontap-edge-select-cloud-vsaVeeam Documentation link for LenovoLenovo DM Serieshttps://helpcenter.veeam.com/docs/backup/vsphere/system_requirements.html?ver=120#lenovo-dm-seriesNetApp ONTAP 9.14.1 Release Noteshttps://library.netapp.com/ecm/ecm_download_file/ECMLP2492508  

Hi All,I know that his topic has been discussed before in the community but I tried all what mentioned on those topics but it did not work.I checked that Veeam Agent for Linux is installed also the Oracle Plugin installed too but when I do application backup (RMAN) via the VBR console I’ve got the warning “Nothing to process” It is also added to managed Linux and added to Protection GroupFrom Oracle Linux all the required packages and component are installed also I removed it and uninstall the agent and plugin and reinstall it and re scan it many times and got the same thing.Is there a missing thing ? Thanks in advanced for your  help and support

 In this demonstration, we will walk through the steps required to install Veeam Backup for GCP and integrate it with Veeam Backup & Replication using a plug-in.With Google Cloud Plug-in for Veeam Backup & Replication, you can add Veeam Backup for Google Cloud appliances to the backup infrastructure and perform the following operations from the Veeam Backup & Replication console:Start and stop backup policies, monitor session statistics, and perform configuration backup and restore. View created snapshots and image-level backups. Restore VM instances, individual persistent disks, and guest OS files and folders. Restore VM instances to AWS, Microsoft Azure, and Nutanix AHV. Perform Instant Recovery of VM instances to VMware vSphere, Hyper-V environments, and Nutanix AHV clusters. Restore all Cloud SQL instances and specific databases.I hope this video is helpful! 

Hi Team,The question is based on the article Veeam Service Provider Console 8.0 Deployment Guide’ ( Veeam Service Provider Console 8.0 (https://helpcenter.veeam.com/docs/vac/deployment/ports.html?ver=80). Communications from Veeam Service Provider Console Server to Veeam Cloud Connect server the on TCP  port range 49152 to 65535. As per a Veeam support team person, they mentioned that, it is better to open around 50-100 ports to facilitate potential requests between the servers.Just wondering the best method to assign the ports through the firewall. Tried using the ‘netstat -aon’ to identify any listening state ports. To facilitate the connection from VSPC server to VCC server, simply can create an outbound rule on the VSPC server firewall for the specified port range (49152 - 65535) and an inbound firewall rule on the VCC server for the same port range.However, not sure whether this is the best method to achieve the task in a production environment since, opening ports on a server unn

⏳😻Once more, it's time to select our favorite blog of the month! Despite February being a short month, we've been treated to outstanding content from everyone! We've shortlisted six standout blogs, and now it's your turn to vote! Make sure to vote by March 3rd, and we'll reveal the winner on March 4th. Don't miss out on this chance to voice your opinion!💪✍👇Wishing all our participants the best of luck! 😊@marcofabbri , @Michael Melter , @Geoff Burke , @leduardoserrano , @allynz , @Chris.Childerhose Best, Madi  

This is a Powershell Script that can be used to install and configure Veeam AIX Agent without needing to log into the AIX system. Can be because of lack of AIX expertise or a large number of AIX systems.  https://github.com/VeeamHub/powershell/tree/master/BR-AgentAIX-Install

The new official capacity calculator for O365 is now live at https://calculator.veeam.com/vbo/You can either connect it to your real account and retrieve needed data or manually input data:If you love the full details you can click the “Show details” button:This will definitely make it a lot easier to estimate capacity use, but also size VBO servers and proxies, just click on the little “i” icon next to infrastructure sizing for even more information like CPU/memory: 

hi Veeam CommunityI have a veeam backup server that is physically installed on an hpe server and the backup repositories are also local. There are 3 drives that are 18 TB each.Now we want to replace the new server with new hardware and my question is, what is the best way to migrate to the new server?There are about 60 terabytes of data on local drivesHow can we do this with minimal downtime or disruption?Does anyone have any experience with this, I'd be happy to hear any suggestions or advice you may have

Just a quick teaser of a project I’ve been working on since receiving my RPi 4B last week. I CAN’T OVERSTATE THIS ENOUGH, THIS IS NOT TO BE USED FOR, AND MUST NEVER BE USED WITHIN A PRODUCTION ENVIRONMENT. THIS IS A FUN PROJECT ONLY. I’ve managed to get Veeam’s binaries running on the Raspberry Pi, but I don’t mean the backup agent, I mean the actual Veeam Installer Service and Veeam Transport Service components.I’ve managed so far to create backup repositories directly on the RPi, though I’m having issues getting IO to flush properly to attached storage, causing backup jobs to fail.The VMware backup proxy process incorrectly identifies the Raspberry Pi as 32-bit when it’s running a 64-bit OS, and is reporting itself as x86_64.But I’ve managed to successfully use the RPi for arguably the best use-case, as a super cheap SoC for a ROBO NAS Gateway. You might be thinking at this point I’ve used qemu and ‘so what, you’re emulating x86_64’, but that’s the difference, I’m actually using box6

Hello all, is there any possibility to have report directly from Veeam? We have Veaam v12.2 for really small environment and Installing/configuring VeeamONE is a big hammer for this nail.I would like to have same report as you got when you right click on completed backup job “last24 hours” and click on report. I didn’t find anything that can do that automatically to file.thanks,Ladislav.

Hi everybody!Exist some configuration to use a current SAN infrastructure to send backups from Solaris agent to Repository server (in Windows) ? Thanks a lot for your answers and regards.

I have a 2 node ESXi 7.0.3 host setup and running Veeam v12 to backup 5 VMs to a NFS share (all production VMs exist on node A, NFS share is BSD VM on node B).  The thought is that currently all production VMs can run on a single host and a backup copy of those can be created in a VM on host B.  Each server has qty 2 10Gb network interfaces and I have connected both NICs in a port group and virtual switch along with creating a vmkernel interface on both hosts referencing the correct port group.  After reconfiguring VMWare, I rescanned both ESXi hosts in Veeam and started the backup job.  I am not convinced that the process is using the new 10Gb link between the 2 hosts for the transport process.  What am I missing?

 i enabled malware detection, the next day an alarm went up on the ubuntu Hardened backup repository server where immutable backups are saved. Backup jobs are " enable backup encryption" I suspect this is the cause of the false positive. Ran the secure scan Linux version -scanAV which with - YARAScan of 12.1 comes out clean .thanks to the invaluable guidance of @SteveHeart https://community.veeam.com/yara-and-script-library-67/vbr-securerestore-lnx-ps1-secure-restore-for-linux-vm-4617.\vbr-securerestore.ps1 -Mounthost myububtu -Scanhost immu-repo -Jobname D10-my-job -Keyfile .\public-key.key -AVScan.\vbr-securerestore.ps1 -HostToScan immu-repo -Jobname D10-my-job -Mounthost myububtu -LinuxUser my-user  -Keyfile c:\cert\public-key.key -YARAScan Has this happened to anyone? For the moment I mark them as cleanThanks

Hi CommunityLooking for a DR option that would help us leverage Cloud storage. We have an on-prem VBR server with a pair of local repositories. We would like to backup a portion of our our Local VM infrastructure to S3 as part of our DR strategy and in the even of a DR incident leaving our primary data center offline we would like to be able to restore these instances from S3 to EC2. 2 problems i see instantly are the lack of access to the backup server if the primary datacenter is offline and the VMs communicating unless we use the same network segment on EC2 when we spin up the environment. Anyone see a way to do this short of replicating all the needed VMs to EC2 in an offline state?I believe this can be done with replication of the VMs to EC2 and the file shares to S3 Active and even orchestrated but I was hoping for a less expensive option as well.

Hi Team, Am facing issues uninstalling VeeamBackup&Replication_11.0.1.1261_20220302.Control panel does not show any Veeam program but when I search through cmd it shows below components. When I try to remove VBR Server is gives error unable to connect to SQL server. Value cannot be null. Parameter name TargetHost. Could you please help if anyone has faced and resolved this kind of issue. 

hi veeam communityIn version 12.1, extraordinary security features are offered, one of which is Early Threat Detection.I want to know what is the out-of-band restore point that is marked in yellow in the picture and has anyone used this feature and has any experience about it? 

Customer has 3TB (500GB x 6 CPU) from VUL. They need to add additional 2TB. Capacity is a lot cheaper then VUL but I don't know is this going to be stacked or is it doable to combine these licenses ?This is essentials version of the Veeam.