• EN

Replies posted by MicoolPaul

2242 Comments

D
DrThirstyNot a newbie anymore
asked in Discussion Boards

No connection could be made because the target machine actively refused it 10005

Thanks for this, I asked about Azure because you could have NSGs in the way but if these are on-prem then that’s not a problem… The KB everyone is sharing is a good run book, I would be tempted to do a quick PCAP on both ends to see if the traffic is getting there or not to rule whether this is a connectivity issue or a software issue.

22
coolsport00
1 month ago
D
DrThirstyNot a newbie anymore
asked in Discussion Boards

No connection could be made because the target machine actively refused it 10005

Hi,So this is either routing or firewalls I’d say. You mention azure so is this server a VM running in Azure? Are the devices within the same subnet/vnet? If not then I would explore routing, you mentioned pinging works but ping doesn’t confirm the device is what you think. I’m not saying this is your issue but I’ve had a few times where someone has made an IP conflict that has broken communication. What you need to know is regardless of default gateway or not, in a multi NIC configuration, VBR and the endpoint will attempt to communicate across ALL interfaces, you can enforce a processing order for this with the preferred networks setting, but this would only delay backup tasks not stop them working as it would eventually failover to a working configuration. Your error indicates an inability to communicate or a firewall dropping the traffic silently instead of denying

22
coolsport00
1 month ago
K
kindzmaNot a newbie anymore
asked in Discussion Boards

"possible ssl heartbleed attempt" reported by Meraki firewall for Veeam port 902 traffic?

Sounds like a plan as your PCAP will contain all supported SSL protocols and ciphers, it could be something as simple as a cipher mismatch that Meraki thinks is trying to be a heart bleed attemp, otherwise you might find that one side is unexpectedly offering older SSL options despite your config. Let’s find out!

15
MicoolPaul
1 month ago
K
kindzmaNot a newbie anymore
asked in Discussion Boards

"possible ssl heartbleed attempt" reported by Meraki firewall for Veeam port 902 traffic?

Yeah the traffic itself is safe but I’d say just look into the negotiation and see which side is trying to suggest a lower form of TLS, once we know this you can enforce TLS 1.2 only on both sides then this should go away 🙂

15
MicoolPaul
1 month ago
safiya
safiyaCommunity Analyst
published in Blogs and Podcasts

Veeam 100 Show - PowerShell Power-Up: Advanced Veeam Scanning Techniques using ScriptsVeeam 100 Show #7

Thank you everyone that watched, live or on demand! And a huge round of applause to @SteveHeart for his amazing contributions to the Veeam community! Steve makes my favourite product feature (SureBackup) even better! 🎉

16910
vAdmin
1 month ago
MicoolPaul
MicoolPaulVeeam Legend, Veeam Vanguard
posted in VRO Heroes Den

Opinions on VRO Platform Support

@EdFromOhio hopefully you’ve seen Veeam’s stance shift on this then: https://forums.veeam.com/ovirt-kvm-f62/feature-request-proxmox-t71691-120.html?hilit=Proxmox#top at least we’ve got written communication it’s being evaluated! 🙂 I haven’t used Proxmox yet but I personally am in the camp of Hyper-V because Xbox and Azure and a chunk of M365 services sit on this so it’s too big for Microsoft to bin, though I agree completely that Hyper-V has been gathering dust until their announced windows server 2025 changes! Keep the feedback coming people I find it interesting to see where people are looking at shifting to and maybe someone at Veeam will even find this useful for decision making!

9
wesmrt
1 month ago
johan.h
johan.hNot a newbie anymore
posted in Discussion Boards

Excited about Hyper-V 2025

I’m looking forward to seeing Veeam leveraging hotpatching to reduce the amount of downtime for the backup servers. I’d love to see some of the network configuration backup functionality we’re seeing in VBfMA for example to reach the on-prem equivalents. Protecting virtual switch configurations for host rebuilds etc. It’s not a ‘mission critical’ feature, but it’s just a nice to have to reduce rebuild configuration issues. Naturally I want to see more in the way of CDP support for Hyper-V and the extension of VRO to this hypervisor.

3
MicoolPaul
1 month ago
K
kindzmaNot a newbie anymore
asked in Discussion Boards

"possible ssl heartbleed attempt" reported by Meraki firewall for Veeam port 902 traffic?

Hi, Just seen this thread, quick question. If you do a packet capture, do you actually see any SSLv3 traffic as part of negotiations etc? Thinking a capture filter could help isolate nodes and ports to identify what’s doing this

15
MicoolPaul
1 month ago
M
messherComes here often
asked in Discussion Boards

FileServer Backup

I’ve noticed that KB doesn’t say v12 so it might not be current advice there. Would need to test, I’d suggest speaking to support

2
MicoolPaul
1 month ago
V
veeamagesNew Here
asked in Discussion Boards

Moving Backups Load

Morning 🙂 Feature requests go to forums.veeam.com if you’re happy to post your request over there, in the meantime if you manually copy your backups between repositories using file explorer or whichever appropriate equivalent then it doesn’t take any tasks, but I agree it’s less than ideal!

3
dloseke
1 month ago
N
NourinuxNew Here
asked in Discussion Boards

10:30:32 Calculating digests Error: Could not find file 'C:\Windows\TEMP\tmp171E.tmp'. Could not find file 'C:\Windows\TEMP\tmp171E.tmp'.

Hi, AV Exclusions: https://www.veeam.com/kb1999VSS should have more than 10% free per disk 🙂 I’d test pausing your AV and seeing if you continue to get this temp file issue

9
N
1 month ago
N
NourinuxNew Here
asked in Discussion Boards

10:30:32 Calculating digests Error: Could not find file 'C:\Windows\TEMP\tmp171E.tmp'. Could not find file 'C:\Windows\TEMP\tmp171E.tmp'.

Hi, does the server have enough physical disk space for Windows VSS? And, presuming there’s antivirus on the server, have you included the relevant AV exclusions?

9
N
1 month ago
N
NourinuxNew Here
asked in Discussion Boards

Unable to truncate SQL server transaction logs

Hello! Have you followed the documentation to make sure the account you’re using to interact with the server has the relevant SQL Server permissions on this instance?

8
N
1 month ago
V
VEEAM_LegendComes here often
asked in Discussion Boards

vMware removed HPE Proliand from theires Patch

Hi, So if you’re using vSphere Lifecycle manager you just need to have your hosts remediated against baselines IIRC? Is the host patched in line with the rest and then have you tried installing the filter driver from Veeam afterwards? Reference Link: https://helpcenter.veeam.com/docs/backup/vsphere/cdp_io_filter_install.html?ver=120

3
Chris.Childerhose
2 months ago
J
jdower98Comes here often
asked in Discussion Boards

Ghost job session started to run

Hi, is this a VM job, agent managed by VBR job or agent self managed job?

4
Chris.Childerhose
2 months ago
B
benjaminligaComes here often
asked in VUG USA

Backup Oracle RAC cluster

Hi, So Oracle RAC won’t be supported as a VM or Agent Backup of the data itself though you could certainly still backup the OS via those methods. If you look into the Oracle RMAN plugin you can perform backup this way 🙂 https://helpcenter.veeam.com/docs/backup/plugins/rman_plugin.html?ver=120

5
Moustafa_Hindawi
1 month ago
B
benjaminligaComes here often
asked in VUG USA

Backup Oracle RAC cluster

Hi, absolutely 🙂 what version of the oracle database are you using? What OS does your RAC reside upon?

5
Moustafa_Hindawi
1 month ago
M
miriam1989Comes here often
asked in Discussion Boards

Scale-Out Repository Design

Hi, For the performance tier you can use either block or object storage. If using block you’ll want to use a Hardened Repository (running on Linux) to enable immutability. Typically for this you’ll just want a server with a lot of disks such as a Dell R740XD2 (if you need THAT many disks) to get maximum capacity on the performance tier. But depending on how much you want to keep on performance tier that might be overkill. Avoid NAS devices as they can’t be immutable when using block storage. If using object storage there are plenty of options on the market. Object First, Scality Artesca, VAST Data are all examples of good products in this space. Capacity tier you say to “buy” but do you actually want to buy storage or use something cloud based? In all scenarios the storage will be object based so whether you want to use an object storage vendor like I mentioned in the performance tier or an S3 compatible service like Wasabi or even S3 or Azure Blob themselves. Finally for archive, unti

3
Moustafa_Hindawi
1 month ago
D
doug-ppcNot a newbie anymore
asked in Discussion Boards

Best way to give the Veeam backup server for Microsoft 365 an address (IP or name) for Restore Portal config??

Hi, How do you want to access the restore portal? Anywhere in the world publicly? Or within particular networks? If you want it to be publicly accessible and trusted you’d need to use a domain (one you own not a .onmicrosoft.com suffix), adding DNS records that point to your services, and then getting a trusted SSL certificate for access. If you don’t want it to be publicly accessed but just within particular networks or accessed anywhere but only via a secure mechanism you could use a VPN to remotely access for example.Depending on how far you feel comfortable with this it might be worth looking at Veeam Data Cloud or an MSP’s offering.   

5
Chris.Childerhose
2 months ago
E
emmanuel.sNot a newbie anymore
asked in Discussion Boards

Install veeam backup & replication

Hi, you don’t need to, and shouldn’t add it to your production domain :) Either a separate management domain, or standalone workgroup will be better!

8
Moustafa_Hindawi
2 months ago
J
Jenes hooshangiComes here often
asked in Discussion Boards

what does mean "out-of-band restore point" mean?

Hi @Jenes hooshangi just to give some extra context to this. This functionality isn’t Veeam initated, it’s driven by the third-party security product or service triggering an API call to Veeam to say that they believe an incident is taking place and to trigger a backup “out of band” of your normal backup schedule, aka on demand. The concept behind this is that if a ransomware attack was initiated and a third party system detected this, it could tell Veeam to back everything up there and then to preserve the maximum amount of data, with minimal RPO. A common question with this is “well isn’t it too late by the time your backup runs” but when we think how fast a snapshot is taken, and Veeam reads from the snapshot, it does dramatically improve the chances of recovering live data with minimal data loss.

6
MicoolPaul
2 months ago
E
emmanuel.sNot a newbie anymore
asked in Discussion Boards

Partner veeam

Partnering is done via https://www.veeam.com/propartner.html?ad=menu-partners Personal commercial training is available for partners via Veeam’s ProPartner portal. Technical training is the VMCE or VMCA certifications, and there’s some uncertified basic training available on this site via the Veeam university Link on the homepage

7
Federica
2 months ago
J
Jonas97-KtNew Here
asked in Discussion Boards

Discrepancy between used space in a bucket and Veeam?

Hi, Two things come to mind here:Veeam is reporting on the size of all the objects it has written, whereas Nutanix might be showing you the total raw consumption of the multiple copies of objects across the nodes for redundancy You might have orphaned data that Veeam is no longer using but Nutanix didn’t delete, such as due to overwhelming the S3 endpoint.This is speculation as I’ve not seen your environment, nor do I have a Nutanix objects setup available to test, but it’s common things with object storage I’m aware of

3
Pybarra
2 months ago
M
MarkDNot a newbie anymore
asked in Discussion Boards

Error: Failed to call RPC function 'FcReadFileEx': An unexpected network error occurred. Failed to read data from file

Others have addressed the VBM appears to be corrupted, I’d like to share some details to attempt to prevent this from happening again.You’ll have a gateway server talking to your SMB share, make sure this gateway server is in the same physical location as the NAS and can talk directly to it without any firewalls or traffic inspection in between. Make sure Synology’s write cache feature is disabled. Performance will unfortunately take a hit but it means that writes won’t be confirmed until they’ve actually been written to disk instead of to RAM (as if you have a crash or power loss the data is inconsistent!, Synology doesn’t have any battery backups for the write cache). Id suggest using iSCSI to communicate to the Synology instead of SMB if possible. This way you can leverage fast clone to increase storage efficiency. Your server that is connected to the storage would have the storage mapped as a drive letter with an ReFS file system (assuming you’re using windows here, XFS if Linux),

10
Chris.Childerhose
2 months ago
J
Jenes hooshangiComes here often
asked in Discussion Boards

Job aborted due to server termination

Thanks, let us know. Depending on your patching policy it might make sense as yesterday was the day after patch Tuesday so automatic updating could’ve done this 

13
dips
2 months ago

Badge winners

Show all badges
Terms & Conditions