Greetings,
Below is a part of Cohesity's multi-layered protection against a ransomware attack as mentioned in the Cohesity datasheet, there is a document for best practices when configuring carving regular repositories and/or SOBR from Cohesity to the Veeam Server and this is can be done over SMB or NFS protocols. my question is if we followed these best practices, can we leverage Immutable snapshots and Datalock from Cohesity with Veeam Backup?
also I read this on Reddit:
Hi
Welcome to the Community forums. I am not too familiar with the Cohesity platform, however my first question, after reading the information snippet from the Cohesity datasheet is, ‘Can an Admin on the Cohesity platform delete the gold copy backup snapshot irrespective of retention period?’
It would be better for Veeam alone to handle all backup retention and immutability operations without anything else being able to.
Hi
Thank you for your message.
your question is regarding the data locked snapshot or the read-only snapshot. I would say for both the admin will not be able to delete the snapshot. in other words, locked snapshot can be deleted only after its retention period expired, additionally, if the backup snapshot is in read-only access then no it cannot be deleted.
We use Cohesity and have configured it as per their documentation but have never tested the immutable features but based on what you posted I agree that Veeam will not be able to conduct retention removal and it will need to be done on the Cohesity by the Admin.
Hi
Thank you for your message.
your question is regarding the data locked snapshot or the read-only snapshot. I would say for both the admin will not be able to delete the snapshot. in other words, locked snapshot can be deleted only after its retention period expired, additionally, if the backup snapshot is in read-only access then no it cannot be deleted.
Just to add, you still have the issue where a malicious actor getting in to the Cohesity device and performing a reset may cause you to lose all your backups. Ideally you would want something that only Veeam manages.
Again, I am not too familiar with Cohesity so my understanding may be incorrect in the way it works.
Enter your E-mail address. We'll send you an e-mail with instructions to reset your password.
