• EN

Community

News, guidelines and various community projects

3781 Topics

F
FellipeCMNot a newbie anymore
asked in Discussion Boards

Recovery from Veeam Hardened Repository

Hello, everyone! I have been studying and doing some labs to better understand how the immutability on a Linux Repository works. This is my current Veeam Backup & Replication structure:- 1 Backup Job for VMware VMs;- 1 windows agent Backup Job for a physical machine;- 1 Backup Copy job for each of the previous jobs, with the hardened repository as the target. The hardened repository is a Ubuntu 20.04 LTS with a XFS disk. The SSH service is disabled and no gateway is set. The Veeam server was first configured to use a single-use credential.Everything works great! My question is:In a scenario where all the VMs, physical servers and Veeam server are lost, where all I have are the immutable backups, how should I approach the repository?What I did so far was:- Start the SSH service of the hardened repository, open the port 22 in OS firewall;- Get a separate windows machine running and install Veeam B&R in it;When I tried to add the Linux repository to the new Veeam server, it could

6
F
1 year ago
C
cmellonNew Here
posted in Discussion Boards

Terminated Users Office365 backup?

How is everyone handling terminated users in office365 backup?  Are you exporting the data or just keeping the user in the backup system? 

3
MicoolPaul
1 year ago
T
Tommy ArmandoNot a newbie anymore
asked in Discussion Boards

Backup To Tape Strategy

Hii Guys, I'm trying to find a backup to tape strategy on veeam, our company has the following two backup policies:1. Daily Policy- Backup job runs every day, job schedule starts at 07:00 PM and must be finished before 06:00 AM.- Using the Forever forward incremental method- Backup defragment is done once a week- Backup Health Check is done once a week- Retention policy is set for 30 restore points2. Weekly Policy- Job backup runs once a week, starting at 07:00 PM and must be completed before 06:00 AM.- Using the Forever forward incremental method- Backup defragment is done once a week- Backup Health Check is done once a week- Retention policy is set for 4 restore pointsHere's what I want to achieve:1. Backup is stored on tape for 1 month2. Media pool in one month is divided into 4 media sets3. Use as little tape as possible (Due to the limited number of tapes) Can someone give me some input on how to configure it to reach my target, or can anyone give me better input for my backup str

8
Scott
1 year ago
MicoolPaul
MicoolPaulVeeam Legend, Veeam Vanguard
posted in Discussion Boards

Using Nutanix Objects? You might be in violation of MinIO licensing

This wasn’t on my 2022 bingo card… According to MinIO, Nutanix Objects has been using MinIO for years without disclosing this, and after years of discussions, they’ve been unable to find a good faith solution to this. Therefore MinIO have revoked Nutanix’s licenses to MinIO software. I don’t want to misinterpret this as MinIO’s blog post has strong legal vibes to it, but MinIO are advising customers of Nutanix Objects may have legal & security risks by continuing to use Nutanix Objects. You can find MinIO’s statement here: https://blog.min.io/nutanix-objects-violates-minios-open-source-license/As of the time of writing, I’ve been unable to find any announcements from Nutanix relating to their perspective on the matter, via their social media, blog or news resources. If you utilise Nutanix Objects, you certainly need to question how this impacts you, and sooner rather than later!

14
MicoolPaul
1 year ago
bb5890
bb5890Comes here often
asked in Discussion Boards

Restrictions on Veeam Agent Backup for a Linux VM residing on a socket-licensed host?

Hi ,Are there any known limitations to backing up a Linux VM with the Linux agent residing on an esxi host with a socket license?Thanks! 

14
dloseke
1 year ago
MicoolPaul
MicoolPaulVeeam Legend, Veeam Vanguard
posted in Blogs and Podcasts

Securing Veeam Backup for Microsoft Azure: Password/Certificate Auth & Other Hardening Tips

Password Authentication & Certificate Authentications both have their pros and cons, but one undisputed stance is that certificates are more secure than passwords when used properly. To that end, I prefer to deploy certificate authentication when working with SSH, and when deploying Linux VMs, Azure prefers to as well.However, Veeam Backup for Microsoft Azure also signs you in with your Ubuntu user account, but doesn't support certificate authentication. Does this mean you're stuck with password authentication? Nope! Is it complex to configure? Also, nope! How does this work?Simply, we'll ensure that SSH is configured to only support certificate authentication, whilst configuring a password for authentication against the Veeam Backup for Microsoft Azure portal. For good measure, we'll also go through how to secure this platform further to reduce your attack risk. Getting set up with Certificate AuthenticationWhilst typically the more difficult part, Azure has done a great job of ma

4
MicoolPaul
1 year ago
E
Elsayed ElmazounNot a newbie anymore
asked in Discussion Boards

Kasten backup copy

Hi All, Can we create like backup copy from Kasten exported data?I know we can set only one export location to the snapshot action? But what if the requirements we need more than one copy on different storage for the application backup? Also, how can we delete the local snapshot created by Kasten on OCS CSI storage for example and how can we see this data from openshift side not Kasten dashboard?  Thank you 

0
E
1 year ago
D
ddomaskComes here often
posted in YARA and Script Library

Retention Restore Age Report

Hopefully not spam, but occasionally I’ll see questions from Support Cases on “Can we do X with Powershell” and it gets my interest enough that I like to pump out a quick script as proof of concept.As a quick reminder, Veeam Support does not produce custom code on demand, so cases aren’t the right route for getting help with scripts or ideas. Such requests are routed to the forums for assistance.But, I’d feel bad not sharing the results of my curiosity as maybe someone would find it useful. Scenario:We ended up with a case where a client wanted to help gauge where they should keep their retention at based on the average age of restore requests. This is a great and proactive question and I really liked the idea of checking one’s retention policies against real-world use in their environment.VeeamOne has a great report for this already with the Restore Operator Activity, and I recommend you use that if you are licensed for VeeamOne. If not however, this is fairly fast and easy script to

4
regnor
1 year ago
V
VeeamRBL
asked in Discussion Boards

Veeam Backup and Replication of Azure VM and Repository is Azure blob or Azure SMB Share

Hi, can you help me figure out this scenario.Customer have a license for VBR version 11 with few instances.They want to backup their Azure VM’s and store the backups on their Azure blob or Azure Smb file share. So the plan is  to spin a vm instance on their azure,  install VBR on that new VM instance, add the license, add their VMs as managed server on the VBR, configure target backup repository as Network attached storage (SMB) or configure target backup repository as (Object Storage - Azure Blob).Note: License is for VBR version 11 and not for Veeam Backup for Microsoft Azure.Now the question is, what is the proper approach for this scenario?Can we add each vm instance from their azure as managed servers to be able to backup it up or do we have to connect through Veeam backup Microsoft azure appliance? (Note: Customer does not want to deploy Azure Appliance)Is adding Azure SMB share as backup repository supported? Can I directly point my backup to my target Azure Blob repository? 

12
Mildur
1 year ago
I
ice10001New Here
asked in Discussion Boards

Veeam 11a Enterprise Plus backup / copy to Google Cloud Storage possible?

Hi all. I have read many threads and howto’s. I am here now because I just cannot find the answer.As mentioned I have 11a Enterprise plus and can create a Backup repository (although it cannot be selected as it is not listed when I try create a backup but I believe this is not the way to do it any way)When I go to External repositories and select Connect to, I can get all the way to completing the Bucket details on the Wizard screen, and just after selecting the folder (which is another magic trick in itself) I get the error “Repository description not found Agent failed to process method {Cloud.GetRepository.Owner} and can go no further. Does anyone have any idea’s or am I missing something obvious? I just want to back up my HyperV machines nightly to Google cloud storage instead of an external drive and the human management of that.

3
Mildur
1 year ago
G
Gopal SinghComes here often
asked in Discussion Boards

where veeam save in your license file .lic 

where veeam save in your license file .lic @which directory in server

8
G
1 year ago
J
JoeweNew Here
asked in Discussion Boards

[Feature Request] More Scheduling Options for Periodic Backup Copy Jobs

Running Veeam B&R 11.0.1.1261 (11a? and fairly current)I was advised by our veeam rep to use a backup copy job to accomplish what I was trying to do. Basically:we have a daily backup job to disk with 60 days of restore points, and weekly full backups on Saturdays. I want to move a copy of ONLY the weekly full from this job to a different datastore that’s part of a scale-out repository, most specifically to use the backup copy job’s ability to apply GFS retention to what it’s copying Unfortunately the scheduling options for the periodic backup copy job leave a lot to be desired.The only option you have is “run this job every X days at Y time” - that’s it.Considering that normal backup jobs get a wide variety of scheduling options (most importantly in this case “run on specific day of the week” or  “run after specific backup job”) it seems odd that none of these extremely useful options are available within backup copy jobs.Instead the only option is “run every 7 days” which means I

3
J
1 year ago
coolsport00
coolsport00Veeam Legend
posted in Blogs and Podcasts

Veeam Backup & Replication v12 – My Top v12 Features

While attending the VeeamON conference in Las Vegas back in May, Veeam announced they will be releasing Veeam Backup & Replication (VBR) v12 later in the year, and gave several sessions presenting what some of those features will be in the new release. I thought I’d do a write-up of what v12 features I’m looking forward to most, as well as provide a few extra lines of other notable features coming.Security-Veeam is upping its security game by implementing Multi-Factor Authentication (MFA) and Group Managed Service Accounts (gMSA). MFA is self-explanatory. From the VBR Menu > Users and Roles option, a Security window opens for you to select MFA for your Veeam user accounts (see figure below). But what about the gMSA? gMSA is a fantastic concept as it allows Veeam to use Active Directory service accounts while not storing the password locally on the Veeam server (i.e. when using for AAIP). Instead, VBR retrieves gMSA passwords on-demand from organization domain controllers. Platfo

48
Scott
1 year ago
A
Amore514Not a newbie anymore
asked in Discussion Boards

Backup Copys to Synology "Stg.CheckMetadataCorrupt"

Good morning; I have been having some problems with our current setup, I'm ok with smashing my hardware and starting over, but I want something I know will work! I am having issues with a backup copy job moving our backups off-site to another location.We have Veeam installed on a server in our primary data center, this server has 64TB, and all our primary backups are stored here. We have a backup copy job that pushes backups off-site over a VPN to Synology DS416play. At first, we set this up as an NFS share connected to a repository on the Veeam server; doing it, this was very slow, and backups failed. Then we changed this to an SMB share connected to a repository on the Veeam server; again, this was slow, and jobs would never finish.Then we created a LUN and attached the Veeam server with ISCSI creating a drive letter and pointing the repository to this. The ISCSI method increased the speed jobs were flying and working! But over time, we started getting "Stg.CheckMetadataCorrupt" erro

16
D
1 year ago
victorwu
victorwuVeeam Vanguard
posted in Discussion Boards

Kubernetes for vSphere Administrators

 New book: Kubernetes for vSphere Administrators now available https://www.amazon.com/dp/B0B6729429/

5
Chris.Childerhose
1 year ago
Rick Vanover
Rick VanoverRICKATRON
posted in News

No recap this week - Vacation with bad Internet :)

Will do a double recap next week with @Madi.Cristil - El Rickatron is on vacation and the beach resort is great a many things but a place with good connectivity and quiet is not one of them! 

10
ashanpro
1 year ago
Iams3le
Iams3leVeeam Legend
posted in Blogs and Podcasts

Moderate. VMware ESXi addresses Return-Stack-Buffer-Underflow and Branch Type Confusion vulnerabilities

VMware ESXi contains Return-Stack-Buffer-Underflow (CVE-2022-29901, CVE-2022-28693) and Branch Type Confusion (CVE-2022-23816, CVE-2022-23825) vulnerabilities due to the Intel and AMD processors it utilizes.There is a resolution to this issue, and as such there is no workaround discussed in this guide. VMware has evaluated the severity of these issues to be in the Moderate severity range with a maximum CVSSv3 base score of 5.6. VMware ESXi enables you to:Consolidate hardware for higher capacity utilization. Increase performance for a competitive edge. Streamline IT administration through centralized management. Reduce CapEx and OpEx. Minimize hardware resources needed to run the hypervisor, meaning greater efficiency.Multiple side-channel vulnerabilities in Intel (CVE-2022-29901, CVE-2022-28693) and AMD (CVE-2022-23816, CVE-2022-23825) CPUs have been disclosed. Patches are available to mitigate these vulnerabilities in affected VMware products. Below are the impacted products.VMware ES

1
Chris.Childerhose
1 year ago
Iams3le
Iams3leVeeam Legend
posted in Blogs and Podcasts

VMSA-2021-0025.2 - VMware vCenter Server updates address a privilege escalation vulnerability (CVE-2021-22048)

VMware vCenter Server is advanced server management software that provides a centralised platform for controlling your VMware vSphere environments, allowing you to automate and deliver a virtual infrastructure across the hybrid cloud with confidence.This privilege escalation vulnerability in VMware Center Server was reported to VMware by  Yaron Zinar and Sagi Sheinfeld of Crowdstrike for reporting.Present IssueThe vCenter Server contains a privilege escalation vulnerability in the IWA (Integrated Windows Authentication) authentication mechanism. VMware has evaluated the severity of this issue to be in the Important severity range with a maximum CVSSv3 base score of 7.1. Impacted ProductsThe following products are impacted. Workarounds are available to remediate this vulnerability in the affected VMware products.VMware vCenter Server (vCenter Server) VMware Cloud Foundation (Cloud Foundation).Known Attack VectorsA malicious actor with non-administrative access to vCenter Server may expl

4
Chris.Childerhose
1 year ago
S
sgiqhqNew Here
asked in Discussion Boards

Bakcup Job Configuration

Morning,I’m currently trying to figure out exactly how to acheive my backup strategy in Veeam and am scratching my head a little bit… Essentially I want to do the following:Run incremental backups weekly to disk Once verified write these backups to tape and delete the files on disk - These should be written to the weekly set in a GFS media pool Once a month perform a full backup Once verified, write these backups to tape and delete the files on disk - These should be written to the monthly set in a GFS media pool. As above for yearly backups.How does one achieve this? I’m a bit confused by the job configuration process as to how the tape jobs “know” which backup run to write to each type of tape?Any help would be gratefully received.

8
Stabz
1 year ago
H
HanzNew Here
asked in Discussion Boards

MS365 Backup - what if MS365 fails. What can we do with the backup files.

I signed up for a 30 days trial for the MS365 backup. I am backing up my Exchange server into a local repository. I was wondering if MS365 fails. How do we recover from the files we have in the local repository? In other words is if MS365 one day decided not to function anymore. How do we recover our exchange files from the repository that Veeam back up to? 

1
Mildur
1 year ago
Mildur
MildurInfluencer
posted in YARA and Script Library

Verify access to the protected Teams API

Update from @Chris.Arceneaux (Nov 7th, 2022):Chris has created a new script to automate the commands described in my topic. Thank you very much. :)https://github.com/VeeamHub/powershell/tree/master/VB365-CheckTeamsProtectedAPI______________________ My code has the added benefit of not requiring parameters (TenantID/AppId/CertThumbprint) to be specified as long as the script is executed on the VB365 server. It also automagically installs required PowerShell module(s). This script is about KB4322 (Using Microsoft Graph Export API for Teams) Recently, we were asked in the R&D forum, how much time Microsoft will take, until they inform you, that you have been granted to access to the protected API’s.Unfortunately, it seems that Microsoft will not inform you per Mail about the successful approvement. In Microsoft Docs, their statement is to use your application to verify if your request has been approved. Microsoft will only write you an email, if they have more questions about the requ

6
Mildur
1 year ago
A
AarthiNew Here
asked in Discussion Boards

Direct storage integration a best option or not?

what is the best option to integrate nimble storage directly with veeam or to present it as disk on veeam servers and configure backup repository.considering backing up physical infra as well.. 

5
Scott
1 year ago
D
damien commengeVeeam Legend
posted in YARA and Script Library

Veeam backup microsoft 365 script audit

Hello, This is a script to audit VBM365. Feel free to say what you would like if it’s missing :) I know it’s not “complete” # =======================================================# NAME: VBM365audit.ps1# AUTHOR: Commenge Damien, Axians Cloud Builder# DATE: 11/07/2022## VERSION 1.0# COMMENTS: This script is created to Audit Veeam backup for microsoft 365# <N/A> is used for not available# =======================================================$date = (get-date -Format "dd_MM_yyyy_HH_mm")#Create directoryNew-Item -ItemType Directory -Path "C:\temp\VBM365Audit\$date" -Force | Out-Null#ReportPath$ReportPath="C:\temp\VBM365Audit\$date"#Report file HTML path$htmlReportPath = "$ReportPath\VeeamBackupMicrosoft365.html"$HTMLCSS = @'<style>body{color:black;font-family:Vinci Sans Light;font-size:0.79em;line-height:1.25;margin:5;}a{color:black;}H1{color:white;font-family:Verdana;font-weight:bold;font-size:20pt;margin-bottom:50px;margin-top:40px;text-align:center;background-color:#005E

8
D
1 year ago
vChris
vChrisNot a newbie anymore
posted in YARA and Script Library

Powershell script - SQL Automated restore with NDF handling

Hello there,I have a customer who wanted to restore some DBs multiple time per month from production to different stages (dev, test ...) and doesn’t want to delegate the rights with EM or to the console to the devs (surprised Pikachu face). Nor spend hours behind their screen to do it themselves. So i created a script that can be scheduled (windows task) or triggered with their own automation tool.As the source databases are split with multiple NDF I had to figure it out. So here it is, it's far from "State of the Art" script but it does the job.(I have a "vaulted" version that can pick credentials from an encrypted file but I'm not that happy with it so here is the script without it. Feel free to improve it.)# Restore a specified SQL database to a specified folder on the same or different server, rename it, add it to an availability group.# Used, for example, to "restage" the prod database to Dev/Qual# Created by Christian Bocquet - https://www.linkedin.com/in/vchris/ on 11.07.2022# V

1
T
1 year ago
J
julmontNew Here
asked in Discussion Boards

Very slow incrémental backup

Veeam 11.0.1.1260Very slow incrémental backup on SMB shares.At the job’ creation , the first backup bandwidth is up to 54 MB, then when the incremental run, we got up to 200kb and takes hours to backup little. 

12
Link State
1 year ago

Badge winners

Show all badges
Terms & Conditions