Community

As we all know, data backup security is a top priority for every organisation. In my first article I spoke about Security Analyzer feature. In this second part of our series on Veeam’s security features, we’re going to focus on one of the most important new features introduced with Veeam Backup & Replication v12: Four-Eyes Authorization. So, what exactly is Four-Eyes Authorization?The Four-Eyes Authorisation, or the “two-person rule” as it’s also known, is a feature that needs the OK from a second administrator to perform certain sensitive operations in Veeam Backup & Replication. This makes it much harder for any one user to mess up or do something dodgy with important data, because it stops them doing anything important on their own.“The four-eyes principle requires that a critical activity must be approved by at least two people, minimizing errors or security breaches.”Here are the best practices to implement four-eyes authorization and the limitations you should know.First

I’ve spent two days on this and still cant get the console to upgrade / install. I initially tried an inplace upgrade from 12.3.1 to 12.3.3, that failed to complete and when I next tried to run it I kept comming up against the installer codes issue as it thought it was already installed.So I was in limbo, it wasnt installed, it wouldnt ‘uninstall’ either though add/remove programs and the installer wouldn’t offer the install option. Using sysinternals process montitor , I setup two filters one to watch for veeam.setup.wizard.exe and a second one to watch for the path HKCU then ran setup again. the process monitor then shows the registry keys it finds for the products it things are installed. using regedit, I removed the Installer\UpgradeCodes , its a slow process as setup bombs out at the first failure so it need to be kept running to bring up the next code to remove.Next I removed the veeam folders left behind in the program files & program data dirs etc.Eventually I got back to t

Hi all,I've written and tested a PowerShell script to harden a standalone Windows Server 2025 machine running Veeam Backup & Replication, based on the CIS Benchmarks (Level 1 & 2). I’m sharing it here in case it helps others — feedback is welcome!What the Script DoesThis script configures the server securely without breaking core Veeam functionality. It includes: Account Policies: Max password age, complexity, and lockout thresholds (CIS 1.1.x, 1.2.x) Guest & Anonymous Access: Disabled for better baseline security Audit Policy: Enabled for all major categories (CIS 17.x) Unneeded Services: Disabled (safe defaults — e.g., Print Spooler, Xbox services) Windows Defender: Hardened settings with MAPS Advanced, PUA protection, etc. Firewall Configuration: Enables Windows Firewall with a default deny-inbound policy Allows Veeam ports: TCP 6160–6162, 445 (SMB), 135–139 (RPC) Blocks inbound RDP (port 3389) entirely (as this is often a target surface) SMB Pr

 Last week, I wrote a blog post about “pikchr/piclasso.” When beginning this project, I also considered additional ideas. One of these was how to convert certain scenarios from https://www.veeam.com/calculators/scenario into images. This aspect is significant because visualizing the layout of components can improve understanding and, as a solution architect, it facilitates presenting information to customers. I created https://github.com/tdewin/piclasso/blob/main/mergedemo/vscn-to-piclasso.py, a tool that converts vscn files ("export current scenario") into piclasso diagrams. Safe to say that this is not even a BETA but more some ALPHA code or proof-of-concept. You can copy the output manually or use the "--link" option to generate a direct link. On Mac, combine this with the open command to instantly view your content in the browser.  The result: 

I hope you're all doing well.I'm reaching out to the community for some guidance. As a test, I recently used Veeam intelligence to scan our infrastructure.Based on the scan, Veeam intelligence created  the following rule:[rule CommonRansomware{    meta:        description = "Detects common ransomware families"        author = "Veeam Support Assistant"        date = "2023-10-01"    strings:        $locky = "Locky"        $wannacry = "WannaCry"        $petya = "Petya"        $notpetya = "NotPetya"        $cerber = "Cerber"        $cryptolocker = "CryptoLocker"        $cryptowall = "CryptoWall"        $badrabbit = "BadRabbit"        $ryuk = "Ryuk"        $maze = "Maze"        $revil = "REvil"        $darkside = "DarkSide"    condition:        any of them}the results scared me since it’s a bunch on files detected by this rule.  thanks in advance for reading 

When I try to upgrade from 12.2.0.334 to 12.3.1.1139, we receive the error "An error has occurred: The system cannot open the device or file specified." We are waiting for your help on the subject.  

Hi allI was wondering if it is possible to create a backup job of a VM, without having access to the VM Host Server. I have installed Backup & Replication on the VM client itself, connected a backup repository, but when I try to create a backup job, it asks for the IP and admin credentials of the VM Host. Thanks for your help

Hi,  I do a Backup from a Phyiscal Maschine and try do restore it by Veeam Backup and Replication. Of course the PMaschine has 8 Cores, the proxmox SVR just have 4 Cores. I got the error message “Failed to reach the hypervisor. Error output: MAX 4 vcpus allowed”. Is there any solution? I have no possibility to change the vm config bevore create.  Thanks for any help.

Hi all,We are currently facing an issue during the installation of CDP (Continuous Data Protection) in our vSphere 8.0.3 environment. Setup: Hosts are updated exclusively using offline ISO images ISO files are internally validated and approved via change control Online depots are completely disabled vLCM is configured with only our custom HPE ISO (VMware-ESXi-8.0.3-24674464-HPE-803.0.0.12.1.0.11-apr2025.iso) vCenter version: 8.0.3 Hosts affected: esxi03.cloud.local (and others) Problem:When attempting to install CDP, remediation fails with the following error: Host 'esxi03.cloud.local' was not processed, the reason: 'Failed to validate the checksum of VIB 'http://hostupdate.vmware.com/software/VUM/PRODUCTION/addon-main/addon/HPE/vib20/qfle3/QLC_bootbank_qfle3_1.4.51.0-1OEM.700.1.0.15843807.vib', because the computed checksum differs from the expected one stored in metadata. Make sure the specified VIB is NOT corrupted and the expected checksum stored in metadata is correct.'

This is part three of three addressing general topics of environmental architecture for backup systems.In part XVI, we examined considerations for the placement of individual backup components, hardware configuration, and fault tolerance (Point 1 and 2 of the following list of major threats).In part XVII, we examined considerations for locations and site redundancy (Point 3 to 5 of the list of major threats).In this part, we address the aspects of ransomware, malware, theft and threats by insiders. These are points 6 to 8 on the list of major threats to backup environments that we identified in the last part. What are the main threats to backup data? Wrong placement of backup environment components Hardware damage to backup systems Power outages or disasters at one location Power outages or disasters at multiple locations External locations for backup data Ransomware attacks Theft of access data and unauthorized access Intentional or unintentional damage by insidersAs with the topics i

Hello Veeam Community!As many of you know, I’m a huge fan of the community and love following all the awesome content you share. I’ve noticed that outdated Veeam logos or visuals sometimes pop up, so to help everyone stay up to date and keep things fresh and professional, I wanted to share where you can find the latest Veeam brand assets that you can use whether you’re publishing videos, posts, or articles on our blogs. We all loved the old logos, but yes, we are moving forward and modernizing not just our products but also our image. Here are some examples of the old logos you DO NOT want to use if you want to keep your communication fresh and modern. And this is our new, fresh, and cool example of the logo you would like to use. 😎 Where to Find Updated Veeam Brand AssetsJust visit the Veeam Brand Space and explore all the available resources. 😊This portal is your go-to source for everything you need to bring the Veeam brand to life, and find helpful guidelines for using all brand e

I have been using Synology NAS devices for a few years now and was lucky enough this year to get my hands on a new DS925+.  They removed the 10GB option from this one but there is dual 2.5GB ports which you can bond.  Find my blog post below and the link as well.  Enjoy.Synology DS925+ – Installation & Setup Synology DS925+ – Installation & Setup Over the last couple of years, with the help of Synology, I have been able to secure a DS920+ along with a DX517 expansion & a DS923+ NAS unit, which I have written reviews about.  Fast forward to 2025, and I was again in touch with Steph Clayton at Synology, who graciously helped me secure a DS925+ NAS for testing and blogging.The DS925+ is the latest version in the 9xx line of Synology NAS products, featuring several new enhancements, including an updated CPU based on the AMD Ryzen V1500B, a 4-core processor.  The unit also supports up to 32GB of RAM, Dual 2.5GB networking, and NVME drives for caching.The following is a list of t

Hi Team,I have two servers with 100TB each with windows server operating system using as a file servers. one is acting as a primary servers and second is acting as a secondary server by using native replication. Now I wanted to add a third server with 200TB acting as a backup server.Can this can be achieved with the 1 pack of VUL of VDP??Many Thanks-Siddhartha 

Does it make sense to use a separate vCenter with one ESXi host for SureBackup, or can SureBackup be configured on the production vCenter, just using a dedicated ESXi host for SureBackup?

Creating architectural diagrams is challenging for everyone, not just Backup engineers. While you can find Veeam colors and icons at https://www.veeam.com/company/brand-resource-center.html, these resources may change, making it difficult to keep designs current. I found updating most of the Veeam Best Practice guide diagrams—like those at https://bp.veeam.com/vbr/Support/S_Vmware/backup.html—to be especially time-consuming and frustrating. I am continually seeking innovative tools to enhance my workflow. Recently, I discovered pikchr, which offers greater versatility than mermaidjs while still enabling diagrams to be created through code. The layout engine operates from left to right by default, but this setting can be modified as needed. The following example generates two boxes containing the words Proxy and Repository. The word "move" is included to provide spacing between the boxes; without it, they would appear adjacent to each other. The labels “P:” or “R:” at the beginning of e

After the latest FW/Software update on our Exagrids, veeam started trying to use the management network for backups. I was told be exagrid support that veeam tries to use any available address and thus was grabbing an address that was not configured for backups on the Exagrid. How to I use network traffic rules to force Veeam to use a specific network?Bogus IPs for this discussionVBR server is running on 192.168.30.xExagrids are running on 172.16.30.x 

These diagrams are a sample of what I am working on in PowerShell for the next version of the Veeam.Diagrammer module. I am mainly working on generating diagrams of the Cloud Connect infrastructure and the composition of resources used by the tenants. Cloud Connect Infrastructure:Cloud Connect Infrastructure  Per Tenant diagram:Tenant5 Tenant4These improvements will also be part of the next version of the AsBuiltReport.Veeam.VBR report.The upcoming versions are going to be amazing!!!!!

We back up to disk then duplicate to tape for offsite storage. Not quite ready for cloud backups yet. I am wondering if anyone has any experience with Quantum LTO-9 tape drives with Veeam backup. I have quotes for two models. TD-L92BN-AR and TD-L93CN-AR. Thanks.

Hi Everybody,a Customer of mine posted the following in R&D forum because we have some issues with his M365 Backup. They have a Case open since May adressing this issue but there is only litte to none progress. I thought that maybe anybody here might had a similar issue in the past and maby even a solution or workaround:We’re currently facing a critical issue involving both Veeam Backup for Microsoft 365 and Veeam Backup & Replication (VBR), and we’re hoping to hear from others who may have encountered something similar.Background: After restoring Office files (Word, Excel, PowerPoint) — whether from Veeam Backup for Microsoft 365 or via VBR from local backups — the files can no longer be opened. They appear to be corrupted, even though they were fully functional in their original state on SharePoint or in the file system. Restoring to different SharePoint sites or local paths didn’t help. One notable detail: the restored files are smaller in size than the originals.Suspected C

At VeeamOn 2025, Scality announced a unified software appliance with Artesca Object Storage and Veeam Backup bundled inside as a VM on Kubernetes via KubeVirt. Since this is a software appliance it allows you to use the hardware of your preference but have a simplified deployment and management. The current version is using a Windows Server, either 2022 or 2025, and Veeam 12.3. In the future, the Veeam Software Appliance (v13 on Linux) will also be an option.Recently this has passed Veeam Ready qualification as a repository and for object storage: https://www.veeam.com/solutions/alliance-partner/integrations-qualifications.html?alliancePartner=scalityIn the Service Provider space at Veeam, I have had several partners ask about an appliance to make it easier to deploy Veeam and manage it daily. So, I was intrigued by this announcement and wanted to test it out. (I like to play with the tech as this is the way I learn, hands on more than read).I downloaded the ISO to install and after a

The number of VMware-based public cloud offerings continues to grow. Whether it’s to support cloud migration, reduce data center footprint, or simplify operations, more organizations are looking at running vSphere in the cloud. Some of these platforms have been around for years, while others are newer or just starting to see broader adoption. Even though they all run VMware, not every cloud platform gives you the same visibility or control — which makes a difference when it’s time to plan for backup and recovery. To help clarify what’s possible, I pulled together a matrix comparing the major VMware public cloud platforms — AWS, Azure, Google Cloud, IBM, and Oracle — and how Veeam fits into each one. AWS – VMware Cloud on AWS (VMC)A managed SDDC running on AWS with some restrictions that impact transport methods and access. Veeam support is available but requires specific configuration.KB Reference: Veeam KB2414 AWS Elastic VMware Solution (EVS)This is a standard vSphere environment bui

VMCE v12 trainingA brand new VMCE v12 training course was launched in September. The 3-day training now includes many of the great things that have been implemented in this version.Find your training here: Veeam Certified Engineer (VMCE) Training VMCE v12 examThe associated VMCE v12 exam has been available since 1 October. As a Veeam certified trainer myself, I have to be compliant within the next 60 days. That's why I planned a tough schedule and scheduled the exam just one day after this year’s Veeam100 summit in Prague 😀.Schedule your exam here: Get Veeam Certified Now! Exam flavorsThis time I took an online protored exam with PearsonVUE. I used to like on-site exams better, but since Covid I have gotten used to online exams and actually like them more now because of the time savings.The process is fairly straightforward. Once you have registered, you will receive an email with all the information you need. I strongly recommend that you do the test of your environment that is offer

Hi all, I hope you’re well,I require assistance in sizing the backup repository storage capacity for a VM workload running on vSphere with approximately 14 TB of source data. The backup repository well be hosted on a deduplication appliance either Dell EMC Data Domain or ExaGrid.The backup policy includes:7 daily incrementals5 weekly full backups 6 monthly full backups With offloading to azure blob storage cool tier and subsequently azure archive tier.Could you help calculate the actual storage capacity required on the support this retention policy, considering deduplication and compression ratios best practices?

HelloI have 4 VM on 4 different physical servers with Veeam Backup&Replication community edition v12.1.56.In my system, I have a VM under debian 12 which is used as Postfix SMTP relay for all my servers. Internally, everything goes through port 25 and all my servers send mail to this relay without identification or password. The relay then sends everything to my dedicated office365 mailbox.In less than 1 day, 2 of my Veeam VMs stopped sending me mail.So every time I run the test mail, I get the message: Unable to connect to SMTP server because of invalid credentials or connection settings.I've compared the smtp configuration with that of the 2 servers that are still working, apparently I haven't seen any anomalies and everything is identical. Even firewall configurations are perfectly identical between servers:SMTP Server (Basic authentication)SMTP server: IP of my SMTP serverFrom: mail address of my server adminTo: my mail addressport 25timeout 100000The only difference is that th