• EN

Replies posted by IFOK

1 Comment

Iams3le
Iams3leVeeam Legend
posted in Blogs and Podcasts

PetitPotam attack on Active Directory Certificate Services: How to mitigate NTLM Relay PetitPotam attacks on AD CS

Its kind of unfortunate for us, that Veeam Enterprise Manager still uses NTLM Authentication by default to talk to the Veeam Backup Server. Even if we use it as an all-in-one setup on one single machine. NTLM has major flaws and should not be used anymore, wich Veeams Enterprise Manager prevents.Maybe exploits like this will help bump up this topic on Veeams development side, since support told me its on their feature request list.In case anyone is interested: Case # 04936306 

5
I
2 years ago

Badge winners

Show all badges
Terms & Conditions