Skip to main content
Solved

Veeam Backup - Infected Source/VM


JustineP
Forum|alt.badge.img+1

If the source VMs have virus/infected, technically Veeam can backup that but can Veeam knows that the source is infected with virus/ransomware?

Best answer by Chris.Childerhose

JustineP wrote:
Chris.Childerhose wrote:

Veeam is performing the backup but would be unaware about infection.

That is where SureBackup with the virus scanning could help for checking the backup. But again won't help initial backup.

Thanks for that.

If SureBackup scanned the VM and there is virus/infected, what will be the next approach of the SureBackup? They will delete it? or Fix?

You can then use Secure Restore to help with removing or fixing the VM.  Check here - https://helpcenter.veeam.com/docs/backup/vsphere/av_scan_about.html?ver=110

 

View original
Did this topic help you find an answer to your question?

16 comments

Chris.Childerhose
Forum|alt.badge.img+21
  • Veeam Legend, Veeam Vanguard
  • 8395 comments
  • September 22, 2021

Veeam is performing the backup but would be unaware about infection.

That is where SureBackup with the virus scanning could help for checking the backup. But again won't help initial backup.


JustineP
Forum|alt.badge.img+1
  • Author
  • Comes here often
  • 30 comments
  • September 22, 2021
Chris.Childerhose wrote:

Veeam is performing the backup but would be unaware about infection.

That is where SureBackup with the virus scanning could help for checking the backup. But again won't help initial backup.

Thanks for that.

If SureBackup scanned the VM and there is virus/infected, what will be the next approach of the SureBackup? They will delete it? or Fix?


Chris.Childerhose
Forum|alt.badge.img+21
  • Veeam Legend, Veeam Vanguard
  • 8395 comments
  • Answer
  • September 22, 2021
JustineP wrote:
Chris.Childerhose wrote:

Veeam is performing the backup but would be unaware about infection.

That is where SureBackup with the virus scanning could help for checking the backup. But again won't help initial backup.

Thanks for that.

If SureBackup scanned the VM and there is virus/infected, what will be the next approach of the SureBackup? They will delete it? or Fix?

You can then use Secure Restore to help with removing or fixing the VM.  Check here - https://helpcenter.veeam.com/docs/backup/vsphere/av_scan_about.html?ver=110

 


JustineP
Forum|alt.badge.img+1
  • Author
  • Comes here often
  • 30 comments
  • September 22, 2021
Chris.Childerhose wrote:
JustineP wrote:
Chris.Childerhose wrote:

Veeam is performing the backup but would be unaware about infection.

That is where SureBackup with the virus scanning could help for checking the backup. But again won't help initial backup.

Thanks for that.

If SureBackup scanned the VM and there is virus/infected, what will be the next approach of the SureBackup? They will delete it? or Fix?

You can then use Secure Restore to help with removing or fixing the VM.  Check here - https://helpcenter.veeam.com/docs/backup/vsphere/av_scan_about.html?ver=110

 

Thanks a lot! :) appreciated


JustineP
Forum|alt.badge.img+1
  • Author
  • Comes here often
  • 30 comments
  • September 22, 2021
JustineP wrote:
Chris.Childerhose wrote:
JustineP wrote:
Chris.Childerhose wrote:

Veeam is performing the backup but would be unaware about infection.

That is where SureBackup with the virus scanning could help for checking the backup. But again won't help initial backup.

Thanks for that.

If SureBackup scanned the VM and there is virus/infected, what will be the next approach of the SureBackup? They will delete it? or Fix?

You can then use Secure Restore to help with removing or fixing the VM.  Check here - https://helpcenter.veeam.com/docs/backup/vsphere/av_scan_about.html?ver=110

 

Thanks a lot! :) appreciated

But… prior to the backup, can SureBackup feature knows if there is infected, or totally not? :)

or I can use the Surebackup once i do have the backup of the source

 

https://helpcenter.veeam.com/docs/backup/vsphere/surebackup_hiw.html?ver=110


Chris.Childerhose
Forum|alt.badge.img+21
  • Veeam Legend, Veeam Vanguard
  • 8395 comments
  • September 22, 2021
JustineP wrote:
JustineP wrote:
Chris.Childerhose wrote:
JustineP wrote:
Chris.Childerhose wrote:

Veeam is performing the backup but would be unaware about infection.

That is where SureBackup with the virus scanning could help for checking the backup. But again won't help initial backup.

Thanks for that.

If SureBackup scanned the VM and there is virus/infected, what will be the next approach of the SureBackup? They will delete it? or Fix?

You can then use Secure Restore to help with removing or fixing the VM.  Check here - https://helpcenter.veeam.com/docs/backup/vsphere/av_scan_about.html?ver=110

 

Thanks a lot! :) appreciated

But… prior to the backup, can SureBackup feature knows if there is infected, or totally not? :)

or I can use the Surebackup once i do have the backup of the source

 

https://helpcenter.veeam.com/docs/backup/vsphere/surebackup_hiw.html?ver=110

SureBackup is used for testing restores and can do the scanning of the VMs for viruses.  You would need a backup of the infected VM first to test it with SureBackup as it points to the backup job. :smiley:


JustineP
Forum|alt.badge.img+1
  • Author
  • Comes here often
  • 30 comments
  • September 22, 2021
Chris.Childerhose wrote:
JustineP wrote:
JustineP wrote:
Chris.Childerhose wrote:
JustineP wrote:
Chris.Childerhose wrote:

Veeam is performing the backup but would be unaware about infection.

That is where SureBackup with the virus scanning could help for checking the backup. But again won't help initial backup.

Thanks for that.

If SureBackup scanned the VM and there is virus/infected, what will be the next approach of the SureBackup? They will delete it? or Fix?

You can then use Secure Restore to help with removing or fixing the VM.  Check here - https://helpcenter.veeam.com/docs/backup/vsphere/av_scan_about.html?ver=110

 

Thanks a lot! :) appreciated

But… prior to the backup, can SureBackup feature knows if there is infected, or totally not? :)

or I can use the Surebackup once i do have the backup of the source

 

https://helpcenter.veeam.com/docs/backup/vsphere/surebackup_hiw.html?ver=110

SureBackup is used for testing restores and can do the scanning of the VMs for viruses.  You would need a backup of the infected VM first to test it with SureBackup as it points to the backup job. :smiley:

Okay clear! Thanks :))


JustineP
Forum|alt.badge.img+1
  • Author
  • Comes here often
  • 30 comments
  • November 2, 2021

@Chris.Childerhose hello, for veeam one, can that monitoring tool scan/check the VMs prior to backup if that VMs are impacted by ransomware? I saw  article for veeamone that it can "prevent and detect” ransomware - https://go.veeam.com/ransomware-prevention-kit

We are looking for a solution that can check prior backup, if VMs are impacted by any ransomware, or not. Thanks :)


JMeixner
Forum|alt.badge.img+17
  • Veeam Vanguard
  • 2650 comments
  • November 2, 2021

I think for this you will use one of the Anti-Virus applications.

Veeam can scan for viruses in backups.


JustineP
Forum|alt.badge.img+1
  • Author
  • Comes here often
  • 30 comments
  • November 2, 2021
JMeixner wrote:

I think for this you will use one of the Anti-Virus applications.

Veeam can scan for viruses in backups.

Yes agree, AV will do the scanning and customer is aware for that,,, we are checking the veeamone, if veeamone can scan/know prior backup if VMs are impacted before the backup schedule.

 

 


JMeixner
Forum|alt.badge.img+17
  • Veeam Vanguard
  • 2650 comments
  • November 2, 2021

In my understanding is VeeamOne a monitoring tool for Veeam. I am not aware that it has AV capabilities….

But I am not the deepest VeeamOne specialist, so please proof me wrong dear fellow communiteers 😎


Mildur
Forum|alt.badge.img+12
  • Influencer
  • 1035 comments
  • November 2, 2021

You 

JustineP wrote:

@Chris.Childerhose hello, for veeam one, can that monitoring tool scan/check the VMs prior to backup if that VMs are impacted by ransomware? I saw  article for veeamone that it can "prevent and detect” ransomware - https://go.veeam.com/ransomware-prevention-kit

We are looking for a solution that can check prior backup, if VMs are impacted by any ransomware, or not. Thanks :)

 

@JustineP 

You need to use Sure Backup Jobs with Malware Scan (Secure Restore).

Veeam One can give you a report of the surebackup jobs and will show you, if a virus was found or not in the last surebackup run.

 

Recovery Verification Overview - Veeam ONE Reporting Guide


Chris.Childerhose
Forum|alt.badge.img+21
  • Veeam Legend, Veeam Vanguard
  • 8395 comments
  • November 2, 2021
JustineP wrote:

@Chris.Childerhose hello, for veeam one, can that monitoring tool scan/check the VMs prior to backup if that VMs are impacted by ransomware? I saw  article for veeamone that it can "prevent and detect” ransomware - https://go.veeam.com/ransomware-prevention-kit

We are looking for a solution that can check prior backup, if VMs are impacted by any ransomware, or not. Thanks :)

From what I can recall the new VONE does have ransomware monitoring of some sort and very basic but I am sure it is there.  This is what I have read -

https://www.veeam.com/blog/one-ransomware-alarms.html

 


marcofabbri
Forum|alt.badge.img+13
  • On the path to Greatness
  • 990 comments
  • November 4, 2021

What virus repository database does Veeam use for virus scanning in secure restore???


Mildur
Forum|alt.badge.img+12
  • Influencer
  • 1035 comments
  • November 4, 2021
marcofabbri wrote:

What virus repository database does Veeam use for virus scanning in secure restore???

Veeam uses the installed anti virus software on the mount server to check for malware.

It depends on your installed antivirus product. Veeam doesn’t have an antivirus database.


marcofabbri
Forum|alt.badge.img+13
  • On the path to Greatness
  • 990 comments
  • November 4, 2021
Mildur wrote:
marcofabbri wrote:

What virus repository database does Veeam use for virus scanning in secure restore???

Veeam uses the installed anti virus software on the mount server to check for malware.

It depends on your installed antivirus product. Veeam doesn’t have an antivirus database.

Ah there, in fact I could not understand. Thanks @Mildur :)


Comment