VeeamON 2024 - Use Code "COMMUNITY10" for 10% Off!
The special-purpose .local top-level domain (TLD) is not designed for use in the global Domain Name System (DNS). Rather, multicast DNS (mDNS) uses it to resolve hostnames to IP addresses within small networks, eliminating the need for a dedicated DNS server. Specifically, mDNS operates on the local network link and uses the .local TLD for this purpose. When an mDNS client needs to resolve a hostname that ends with .local, it sends queries to the mDNS IPv4 link-local multicast address 224.0.0.251 or its IPv6 equivalent ff02::fb.Top 5 reasons why it is a bad ideaLet’s dive into why using the .local top-level domain (TLD) can lead to a handful of issues.Standards Compliance: The Internet Engineering Task Force (IETF) reserves the .local TLD for mDNS in RFC 6762. If you use it in another context or within a traditional unicast DNS context, you may face non-compliant behavior and conflicts. Compatibility Issues: Systems, particularly those running Apple’s Bonjour service, frequently use mD
I am also one of those users that used LastPass until a few days ago with full satisfaction. A breach can happen to anyone, but by leaving customers in the dark and exposed is especially worrying. By not giving insight who, what and where customers are at risk and what to do to best mitigate that risk is also extremely dangerous. So, to speak the trust in the product and company behind it is gone straight out of the window. But then an important question pops up, what next? Should I still use a password manager or fallback to analog paper?! Why Use a Password Manager?Our online world revolves around accounts with passwords. To stay safe from data breaches, you need to create strong and unique passwords for every account, but remembering them all without help gets particular tricky. Defaulting back to analog paper is a no go for me with over 1100+ accounts and unique passwords. Time to look for a replacement, that will generate, store, and secure my most important digital assets with en
Hi All, hope you enjoyed VeeamON 2021 as much as we did! That is why we added not 1 or 2 but even 4 new bonus sessions to the VeeamON 2021 catalog! NAS Backup — Under the Hood Strategy Session — Native Public Cloud Backup and Recovery Beating Ransomware With Veeam — The Rest of the Story! Strategy Session — Microsoft Office 365 Data ProtectionLogin to the VeeamON website and enjoy! Please let us know in this thread what you think about the particular sessions.
Hello fellow community members, I am looking for some help. I am constructing a new blog around protecting against time attacks in an infrastructure and NTP is most often used. I would kindly ask anyone to add to this list or supply feedback what are the best ways to protecting NTP.>>Network Time Protocol (NTP) is a commonly used protocol for synchronizing the clocks of devices in a network infrastructure. However, NTP can be vulnerable to various types of time-based attacks, including NTP amplification attacks, NTP reflection attacks, and NTP replay attacks. Here are some ways to protect against these attacks when using NTP in an infrastructure:Use authentication: NTP can support authentication, which enables devices to verify the identity of the time source and ensure that the time information is coming from a trusted source. It is recommended to use authentication to protect against time-based attacks. Limit access: Restricting access to NTP services can reduce the risk of tim
Photo by Matteo Catanese on UnsplashCyber Security is something nobody can afford to ignore anymore. Hacks and data breaches regularly affect organizations of all sizes. Often these incidents are significant enough to make the front pages, causing irreparable reputational damage to the organizations involved. Keeping today’s digital assets available 24/7 requires more and more knowledge on data flows and infrastructure involved along the way. Insight in which assets are critical to the organization and how to effectively protect them is key in cyber security nowadays. A good starting point is by hardening key infrastructure components. Hardening Hardening is about securing the infrastructure against attacks, by reducing its attack surface and thus eliminating as many risks as possible. One of the main measures in hardening is removing all non-essential software programs and utilities from the deployed components. While these components may offer useful features to the administrator, i
VM SecurityThe last decade virtualization has been rapidly adopted by almost any organization in the world and became a standard industry practice. You may deploy Veeam Backup & Replication components as either a physical or virtual server. For most organizations, virtual is the recommended deployment for Veeam Backup & Replication components as the hypervisor already provides high availability, fault tolerance and great flexibility in sizing and scaling as the environment grows. Looking at the Veeam Backup & Replication components, the only component that we advise to deploy physical are Veeam Backup Repositories, but only when you have control over the hardware. This is because you still need a physical medium to place backup data on and you do not want to store it in the environment you are protecting. There are of course cases where all components including Veeam Backup Repositories will be virtualized, think of placement in Amazon AWS, Microsoft Azure or IBM Cloud. Ena
Physical SecurityIt is essential that only authorized personnel have physical access to the datacenter. Data centers hold sensitive and crucial information and services. Software-based protections on your server(s) become far less effective or even useless as soon as an attacker gains physical access! Access into a data center is fairly limited.Best practices:Use Role Based Access Controls (RBAC) on a physical level; Racks with hardware are by default locked; Equipment in the racks is smartly placed; Any authorized person to enter the datacenter has its own digital access key combined with something they know like a pin code and/or biometric measures; Visibility in the current security status is key for an accurate security; Make sure there are no exterior windows and relatively few entry points.Role Based Access Controls on a physical levelMake sure that anyone that is authorized to enter the datacenter can only access those parts they are entitled to. Follow the principle of least pr
Photo by Adi Goldstein on UnsplashTo prevent outside interference and tampering with the physical hardware several measures should be taken into consideration. By taking the correct measures ensures that you can trust your deployed computing platform, and it adds security to server hardware and operating systems from the moment you turn them on or reboot. Best practices: Prevent injection of shady boot code Run with UEFI Native mode Use UEFI with Secure Boot Standard Mode Combine Secure Boot with a TPM Deploy a TPM 2.0 on Hypervisor Hosts and Veeam Repositories Protect against unauthorized access to Data BitLocker TPM+PIN for Pre-boot authentication Linux Unified Key System (LUKS) Place locks on the hardware Prevent Code Injection The most vulnerable moment of a server is before it boots up the operating system and its applications. This is because shady code in the form of soft- and/or hardware can be added to the system and can hide itself from security applications that will star
What is a hacker? A hacker is an individual who exploits vulnerabilities in computer systems, networks, or software to gain unauthorized access, steal data, or cause disruptions. Hackers can have various motives, including financial gain, curiosity, activism, or espionage. What motivates hackers to carry out cyberattacks? Hackers can be motivated by several factors, such as financial gain, intellectual curiosity, desire for fame or recognition, political or ideological beliefs, cyber espionage, or simply causing disruption for amusement. What are the different types of hackers (e.g., black hat, white hat, gray hat)? Black hat hackers engage in malicious activities for personal gain or malicious intent. White hat hackers, also known as ethical hackers, help organizations identify and fix vulnerabilities in their systems. Gray hat hackers operate in a legal and ethical gray area, often hacking without permission but without malicious intent. How do hackers gain access to computer
SegmentationUltimately, all security is about protecting a valuable asset and reducing risk - in this case it is Data – but that protection involves a defence-in-depth strategy that includes all layers. To do a defence-in-depth, you should identify the most valuable data and build layers of defence around it to protect its availability, integrity and confidentiality.Best practices:Create different zones Define purpose of the zone Define who should have access to that zone Define what people/groups can do in that zone Define access controls for the zone Define relations between neighboring zones Define connections towards neighboring zones Define attack surfaces in the zone Deploy countermeasures In the zone Between the zones Around the zones Design Principles to keep in mind while designing zones Secure by Design Layers of Defense (Protection & Resilience) Principle of least privilege Segregation of duties Economic balance (Between costs and benefits) Useability balance (Between
Hardening the Infrastructure Security are the security measures provided to protect the infrastructure, especially critical infrastructure. While looking into the infrastructure a lot of organizations have already a high rate of virtualization established. Hypervisor hosts are critical infrastructure components at almost any organization, because a large volume of their digital infrastructure is now running virtual on top of those hypervisor hosts.Best practices:Secure Foundation Run Hypervisor hosts with TPM 2.0 chips With VMware vSphere make use of the Attestation report with alerts Run with network isolation for IPMI/iDRAC/iLO remote access interfaces Apply principle of least privilege on these remote access interfaces Run measured Boot with support for attestation Secure FoundationMost components of the Veeam Availability Infrastructure run on top of that virtualization platform, like VMware vSphere. So how can you know for sure that the foundation is secure and trustworthy? When
Microsoft Active Directory is the heart of the IT infrastructure for nearly every organization. When setting up the Veeam Availability infrastructure keep in mind the principle that a data protection system should not rely on the environment it is meant to protect in any way! This is because when your production environment goes down along with its domain controllers, it will impact your ability to perform actual restores due to the backup server’s dependency on those domain controllers for backup console authentication, DNS for name resolution, etc.Microsoft Active Directory consists of Forests and Domains. A forest is a collection of one or more Active Directory domains that share a common logical structure, directory schema (class and attribute definitions), directory configuration (site and replication information), and global catalog (forest-wide search capabilities). Domains in the same forest are automatically linked with two-way, transitive trust relationships.Where a domain is
Already have an account? Login
Enter your username or e-mail address. We'll send you an e-mail with instructions to reset your password.
Sorry, we're still checking this file's contents to make sure it's safe to download. Please try again in a few minutes.
Sorry, our virus scanner detected that this file isn't safe to download.
