Data Centre technology are extremely vulnerable and malicious to Ransomware.Let me know how Veeam protects

Veeam doesn’t protect from ransomware attacks before they happen, such as an anti-virus, or security policies & procedures would do to prevent the attack.

Veeam does however, offer many ways to ensure organisational recoverability against ransomware.

Veeam’s approach is multi-pillared. One such new announcement is the Ransomware Recovery Warranty, this isn’t for all customers due to some restrictions in place, but it shows Veeam taking an active role in design/architecture and implementation stages by ensuring that customers get the best chance of defeating ransomware by a secure-by-design backup architecture (Details here:https://www.veeam.com/products/ransomware-recovery-warranty.html?ad=packaging-premium-randsomware_warranty)

Another such feature is the wide-spread immutability offerings. Whether you wish to use traditional block storage with immutability via the Veeam Hardened Repository, a Veeam Cloud Connect provider offering insider threat protection backup recycle bin features, or Azure Blob / S3 / S3 Compatible with Object Lock functionality to prevent backups from being modified/deleted until their retention period expires.

Then there’s Veeam’s overall guidance to all such as the 3-2-1-1-0 rule, as we’re talking about ransomware attacks, I’d focus on the offline/immutable part of this rule, as in addition to the immutability options available, there are also the offline elements to be considered by Veeam’s support for rotated USB media, or tape. I’d also throw a casual reference in here to the SureBackup testing elements and highlight that without a verified backup, you’re hoping for the best in a recovery situation such as ransomware.

Those are some of the core elements that are common across all the Veeam products, to then look at this from a further step back we have the following considerations:

• What data are we protecting?
• How do we orchestrate recovery?

Veeam tackles both of these scenarios. A datacentre is just a place that your data resides within, this doesn’t always mean a location under your jurisdiction now, as we live in a hybrid world with on-premises & cloud datacentres being connected to each other. So Veeam does more than protecting traditional VMware/Hyper-V/Nutanix/RHV platforms, it also protects physical infrastructure such as Windows/Mac/Linux/AIX/Solaris, NAS, M365, Salesforce, Azure, AWS, GCP, and Kubernetes. With various ways to protect these workloads with offline copies or immutability, those can depend on the specific technology we’re protecting with some having native immutability/offline copy options available, others via nested protection.

As for the orchestration of recovery, Veeam continue to develop Veeam Recovery Orchestrator to support this automation of recovery at scale, combined with simpler solutions such as Failover plans depending on the severity of the attack.

In conclusion, everything Veeam does is about Data Security, Data Recovery, and Data Freedom (stolen shamelessly from their homepage!). It’s just down to you as the backup administrator to find which pieces best fit the requirements of your customer/organisation.