Solved

Veeam Backup - Infected Source/VM


Userlevel 5
Badge +1

If the source VMs have virus/infected, technically Veeam can backup that but can Veeam knows that the source is infected with virus/ransomware?

icon

Best answer by Chris.Childerhose 22 September 2021, 14:50

View original

16 comments

Userlevel 7
Badge +20

Veeam is performing the backup but would be unaware about infection.

That is where SureBackup with the virus scanning could help for checking the backup. But again won't help initial backup.

Userlevel 5
Badge +1

Veeam is performing the backup but would be unaware about infection.

That is where SureBackup with the virus scanning could help for checking the backup. But again won't help initial backup.

Thanks for that.

If SureBackup scanned the VM and there is virus/infected, what will be the next approach of the SureBackup? They will delete it? or Fix?

Userlevel 7
Badge +20

Veeam is performing the backup but would be unaware about infection.

That is where SureBackup with the virus scanning could help for checking the backup. But again won't help initial backup.

Thanks for that.

If SureBackup scanned the VM and there is virus/infected, what will be the next approach of the SureBackup? They will delete it? or Fix?

You can then use Secure Restore to help with removing or fixing the VM.  Check here - https://helpcenter.veeam.com/docs/backup/vsphere/av_scan_about.html?ver=110

 

Userlevel 5
Badge +1

Veeam is performing the backup but would be unaware about infection.

That is where SureBackup with the virus scanning could help for checking the backup. But again won't help initial backup.

Thanks for that.

If SureBackup scanned the VM and there is virus/infected, what will be the next approach of the SureBackup? They will delete it? or Fix?

You can then use Secure Restore to help with removing or fixing the VM.  Check here - https://helpcenter.veeam.com/docs/backup/vsphere/av_scan_about.html?ver=110

 

Thanks a lot! :) appreciated

Userlevel 5
Badge +1

Veeam is performing the backup but would be unaware about infection.

That is where SureBackup with the virus scanning could help for checking the backup. But again won't help initial backup.

Thanks for that.

If SureBackup scanned the VM and there is virus/infected, what will be the next approach of the SureBackup? They will delete it? or Fix?

You can then use Secure Restore to help with removing or fixing the VM.  Check here - https://helpcenter.veeam.com/docs/backup/vsphere/av_scan_about.html?ver=110

 

Thanks a lot! :) appreciated

But… prior to the backup, can SureBackup feature knows if there is infected, or totally not? :)

or I can use the Surebackup once i do have the backup of the source

 

https://helpcenter.veeam.com/docs/backup/vsphere/surebackup_hiw.html?ver=110

Userlevel 7
Badge +20

Veeam is performing the backup but would be unaware about infection.

That is where SureBackup with the virus scanning could help for checking the backup. But again won't help initial backup.

Thanks for that.

If SureBackup scanned the VM and there is virus/infected, what will be the next approach of the SureBackup? They will delete it? or Fix?

You can then use Secure Restore to help with removing or fixing the VM.  Check here - https://helpcenter.veeam.com/docs/backup/vsphere/av_scan_about.html?ver=110

 

Thanks a lot! :) appreciated

But… prior to the backup, can SureBackup feature knows if there is infected, or totally not? :)

or I can use the Surebackup once i do have the backup of the source

 

https://helpcenter.veeam.com/docs/backup/vsphere/surebackup_hiw.html?ver=110

SureBackup is used for testing restores and can do the scanning of the VMs for viruses.  You would need a backup of the infected VM first to test it with SureBackup as it points to the backup job. :smiley:

Userlevel 5
Badge +1

Veeam is performing the backup but would be unaware about infection.

That is where SureBackup with the virus scanning could help for checking the backup. But again won't help initial backup.

Thanks for that.

If SureBackup scanned the VM and there is virus/infected, what will be the next approach of the SureBackup? They will delete it? or Fix?

You can then use Secure Restore to help with removing or fixing the VM.  Check here - https://helpcenter.veeam.com/docs/backup/vsphere/av_scan_about.html?ver=110

 

Thanks a lot! :) appreciated

But… prior to the backup, can SureBackup feature knows if there is infected, or totally not? :)

or I can use the Surebackup once i do have the backup of the source

 

https://helpcenter.veeam.com/docs/backup/vsphere/surebackup_hiw.html?ver=110

SureBackup is used for testing restores and can do the scanning of the VMs for viruses.  You would need a backup of the infected VM first to test it with SureBackup as it points to the backup job. :smiley:

Okay clear! Thanks :))

Userlevel 5
Badge +1

@Chris.Childerhose hello, for veeam one, can that monitoring tool scan/check the VMs prior to backup if that VMs are impacted by ransomware? I saw  article for veeamone that it can "prevent and detect” ransomware - https://go.veeam.com/ransomware-prevention-kit

We are looking for a solution that can check prior backup, if VMs are impacted by any ransomware, or not. Thanks :)

Userlevel 7
Badge +17

I think for this you will use one of the Anti-Virus applications.

Veeam can scan for viruses in backups.

Userlevel 5
Badge +1

I think for this you will use one of the Anti-Virus applications.

Veeam can scan for viruses in backups.

Yes agree, AV will do the scanning and customer is aware for that,,, we are checking the veeamone, if veeamone can scan/know prior backup if VMs are impacted before the backup schedule.

 

 

Userlevel 7
Badge +17

In my understanding is VeeamOne a monitoring tool for Veeam. I am not aware that it has AV capabilities….

But I am not the deepest VeeamOne specialist, so please proof me wrong dear fellow communiteers 😎

Userlevel 7
Badge +12

You 

@Chris.Childerhose hello, for veeam one, can that monitoring tool scan/check the VMs prior to backup if that VMs are impacted by ransomware? I saw  article for veeamone that it can "prevent and detect” ransomware - https://go.veeam.com/ransomware-prevention-kit

We are looking for a solution that can check prior backup, if VMs are impacted by any ransomware, or not. Thanks :)

 

@JustineP 

You need to use Sure Backup Jobs with Malware Scan (Secure Restore).

Veeam One can give you a report of the surebackup jobs and will show you, if a virus was found or not in the last surebackup run.

 

Recovery Verification Overview - Veeam ONE Reporting Guide

Userlevel 7
Badge +20

@Chris.Childerhose hello, for veeam one, can that monitoring tool scan/check the VMs prior to backup if that VMs are impacted by ransomware? I saw  article for veeamone that it can "prevent and detect” ransomware - https://go.veeam.com/ransomware-prevention-kit

We are looking for a solution that can check prior backup, if VMs are impacted by any ransomware, or not. Thanks :)

From what I can recall the new VONE does have ransomware monitoring of some sort and very basic but I am sure it is there.  This is what I have read -

https://www.veeam.com/blog/one-ransomware-alarms.html

 

Userlevel 7
Badge +13

What virus repository database does Veeam use for virus scanning in secure restore???

Userlevel 7
Badge +12

What virus repository database does Veeam use for virus scanning in secure restore???

Veeam uses the installed anti virus software on the mount server to check for malware.

It depends on your installed antivirus product. Veeam doesn’t have an antivirus database.

Userlevel 7
Badge +13

What virus repository database does Veeam use for virus scanning in secure restore???

Veeam uses the installed anti virus software on the mount server to check for malware.

It depends on your installed antivirus product. Veeam doesn’t have an antivirus database.

Ah there, in fact I could not understand. Thanks @Mildur :)

Comment