Skip to main content
  • EN

Security Blueprints

From Veeam's Solutions Architects!

82 Topics
vmJoe
vmJoeVeeam MVP
posted in Veeam Backup & Replication
Veeam Security Blueprints catalog

This post includes a complete catalog of all the Veeam Security Blueprints hosted on this site. The spreadsheet contains the blueprint's name and a link to its content.  The list is current as of 7/15/2025.

832
vAdmin
chas
chasComes here often
posted in Veeam Backup & Replication
Veeam Blueprints

Hi everyone.I run the Solution Architects organization for the Americas here at Veeam, and I am happy to introduce you to our Technical Blueprints. These are produced by our Solution Architects in collaboration with Veeam Product Management, R&D and our alliance partners - it truly takes a village.Our goal was to produce short, easy-to-digest reference documents that offer a prescribed architecture that mirrors situations we have seen in the field. As you can appreciate with a software-defined solution, there are countless variables that impact design and we consciously wanted to avoid "could do..." type documents so we worked to strike a balance between short and useful.The documents are firmly technical (again - prescribed architecture) but should be easily accessible to those with knowledge of Veeam. They are not designed to replace the product documentation (at helpcenter.veeam.com), be a full architecture and design (we have a different process for that, and partners add massi

11364
coolsport00
vmJoe
vmJoeVeeam MVP
posted in Alliance Vendor
Single production datacenter to offsite datacenter with Dell PowerEdge R760xd2 & Data Domain 9800 10,000 VMs

The environment described in this architecture is one main datacenter containing 10,000 VMs and 100 physical servers. Each VM and physical server has an average of 200 GB of used storage space. All backups will be targeted to a local primary backup repository and copied to a secondary offsite location. Proxies are installed on VMs and use the virtual appliance (hotadd) backup method. The primary Veeam Hardened repository will be on Dell PowerEdge R760xd2 server and the secondary repository will be on Data Domain 9800.

1053
E
vmJoe
vmJoeVeeam MVP
posted in Veeam Data Cloud
Single production datacenter with an ExaGrid repository with a copy to Veeam Data Cloud Vault - 5,000 VMs

The environment described in this architecture is one main datacenter containing 5,000 VMs and 100 physical servers. Each VM and physical server has an average of 200 GB of used storage space. All backups will be targeted to a local ExaGrid repository and copied to a Veeam Data Cloud Vault repository. Proxies are installed on physical servers and use the secure network transport (NBDSSL) method. The Veeam Data Mover is configured to run on the ExaGrid appliances in a SOBR configuration.

280
vmJoe
vmJoe
vmJoeVeeam MVP
posted in Veeam Backup & Replication
Veeam Architecture Discovery

The first phase of the VeeamDesign Methodology is the Discovery phase. This phase is devoted to collecting relevant information for later phases. Stakeholders should be consulted to develop a detailed list of objectives and capture environmental data to form requirements.This document contains example technical discovery questions that should be answered before a Veeam Architecture is created.

3452
vAdmin
vmJoe
vmJoeVeeam MVP
posted in Veeam Backup & Replication
Veeam Recovery Orchestrator – 1,000 vSphere VMs recovery to secondary location

The environment described in this architecture necessitates orchestrated recovery and comprises a production datacenter with 1,000 vSphere VMs and 100 physical servers. Each VM and physical server has an average of 200 GB of utilized storage space. All backups will be directed to a local primary backup repository and subsequently copied to a secondary backup target at a secondary datacenter. The tier one and two VMs will be replicated to the secondary datacenter using Veeam replication. Tier zero VMs will use Continuous Data Replication (CDP). Tier one and two VMs will use Image-Based Replication. Veeam will orchestrate mass recoveries to either the production site or the secondary location. The replica failover will be tested regularly.

550
vmJoe
vmJoe
vmJoeVeeam MVP
posted in Veeam Data Cloud
Single production datacenter backup copy to Veeam Data Cloud Vault - 10,000 VMs

The environment described in this architecture consists of one main datacenter containing 10,000 VMs and 100 physical servers. Each VM and physical server has an average of 200 GB of storage space. All backups will be targeted to a local Veeam Hardened Repository Appliance and copied to a Veeam Data Cloud (VDC) customer Vault. Proxies are installed on physical servers and use the network transport (NBD) method.

584
vmJoe
vmJoe
vmJoeVeeam MVP
posted in Veeam Data Cloud
Migration to VDC Vault from Azure: Direct to Object.

The environment described in this architecture consists of one main datacenter containing virtual machines and physical servers protected with Veeam Data Platform. Multiple object storage backup repositories utilize Azure Blob storage. All backups are configured to go directly into these repositories, and encryption is enabled on all backups.This migration will move all backups from the current object storage repositories into new Veeam Data Cloud Vault repositories. Encryption is enforced, and immutability will be enabled by default for the new Vault repositories, and as a result, migrated backups will be automatically encrypted and immutable. This migration uses temporary Azure components to facilitate the move to avoid egress when the Vault is in the same region.  

760
vmJoe
vmJoe
vmJoeVeeam MVP
posted in Veeam Data Cloud
Single production datacenter backup copy to Veeam Data Cloud Vault - 5,000 VMs

The environment described in this architecture consists of one primary datacenter containing 5,000 VMs and 100 physical servers. Each VM and physical server has an average of 200 GB of storage space. All backups will be targeted to a local Veeam Hardened Repository Appliance and copied to a Veeam Data Cloud (VDC) customer Vault. The Proxy servers use the Network (NBD) backup method.#blueprint, #veeam, #reference architecture 

2620
vmJoe
vmJoe
vmJoeVeeam MVP
posted in Veeam Data Cloud
Single production datacenter backup copy to Veeam Data Cloud Vault - 1,000 VMs

The environment described in this architecture consists of one main datacenter containing 1,000 VMs and 100 physical servers. Each VM and physical server has an average of 200 GB of storage space. All backups will be targeted to a local Veeam Hardened Repository Appliance and copied to a Veeam Data Cloud (VDC) customer Vault. Proxies are installed on VMs and use the virtual appliance (hot add) backup method. #veeam #Blueprint  #reference architecture #VDC Vault

1392
vmJoe
vmJoe
vmJoeVeeam MVP
posted in SaaS
Veeam Data Cloud for Microsoft 365

The environment described in this architecture is one Microsoft 365 tenant with 50,000 active users.  The tenant contains Exchange Online mailboxes, archive mailboxes, OneDrive, SharePoint Online, and Teams data. The total amount of data being consumed by M365 is approximately 850TB. 

1140
vmJoe
vmJoe
vmJoeVeeam MVP
posted in Veeam Data Cloud
Single production datacenter with backup copies to Veeam Data Cloud (VDC) Vault. Mass recovery with Veeam Recovery Orchestrator (VRO) 1,000 VMs to Azure.

The environment described in this architecture is one main datacenter containing 1,000 VMs and 100 physical servers. Each VM and physical server has an average of 200 GB of used storage space. All backups will be targeted to a local primary backup repository and copied to Veeam Data Cloud (VDC) Vault. Proxies are installed on physical servers and Virtual Appliance (hot add) backup method. Veeam Recovery Orchestrator (VRO) is installed in Azure and will be used to perform mass recoveries from VDC Vault to Azure. blueprint #veeam #reference architecture #VRO

1850
vmJoe
vmJoe
vmJoeVeeam MVP
posted in Cloud Backup
Veeam Backup for AWS less than 1,000 strategic workloads

The environment described in this architecture is a Veeam Backup for AWS deployment with less than 1,000 workloads to protect.  The protection scope includes EC2, RDS, EFS, and VPCs.  All EC2 backups will be targeted to an object storage repository in AWS S3 and tiered to S3 Glacier storage using a copy job. 

500
vmJoe
vmJoe
vmJoeVeeam MVP
posted in Cloud Backup
Veeam Backup for AWS 1,000 – 5,000 Strategic Workloads

The environment described in this architecture is a Veeam Backup for AWS deployment with 1,000 – 5,000 workloads to protect.  The protection scope includes EC2, RDS, EFS, and VPCs.  All EC2 backups will be targeted to an object storage repository in AWS S3 and tiered to S3 Glacier storage.

330
vmJoe
vmJoe
vmJoeVeeam MVP
posted in Cloud Backup
Veeam Backup for Microsoft Azure 300 - 2,000 Strategic Workloads

The environment described in this architecture is a Veeam Backup for Azure deployment with 300 - 2000 workloads to protect. The protection scope includes Azure VMs, Azure SQL, and Azure Files. All Azure VM backups will be targeted to Azure Blob and tiered into the Archive tier for long-term retention.

710
vmJoe
vmJoe
vmJoeVeeam MVP
posted in Veeam Backup & Replication
Two production datacenters with remote offices, and plant sites with offsite backup copies - 26,000 VMs

The environment described in this architecture is two main datacenters containing 10,000 VMs and 100 physical servers at each location.  An additional 6,000 VMs and 50 physical servers are spread across 30 small office and plant sites across North America. Each VM and physical server has an average of 200 GB of used storage space.All backups will be targeted to a local primary backup repository and copied to a secondary off-site location. The small office and plant sites will send backup copies to Veeam Data Cloud Vault (VDC Vault). Proxies are installed on physical servers and use the network transport (NBD) method. #veeam #blueprints #reference architecture

1610
vmJoe
vmJoe
vmJoeVeeam MVP
posted in Alliance Vendor
Single production datacenter to offsite datacenter Hitachi Content Platform (HCP)

The environment described in this architecture is one main data center containing 5,000 VMs and 100 physical servers. Each VM and physical server has an average of 200 GB of used storage space. All backups will be targeted to a primary backup repository and copied to a secondary offsite location. Proxies are installed on a physical server and use the network transport (NBD) method. The backup target will be Object Storage, which is set for Immutability and accessed via Gateway servers.

833
leduardoserrano
vmJoe
vmJoeVeeam MVP
posted in Alliance Vendor
Single production datacenter to offsite datacenter with Dell PowerEdge R760xd2 & Data Domain 9300 5,000 VMs

The environment described in this architecture is one main datacenter containing 5,000 VMs and 100 physical servers. Each VM and physical server has an average of 200 GB of used storage space. All backups will be targeted to a local primary backup repository and copied to a secondary offsite location. Proxies are installed on VMs and use the virtual appliance (hotadd) backup method. The primary Veeam Hardened repository will be on Dell PowerEdge R760xd2 server and the secondary repository will be on Data Domain 9300.

380
vmJoe
vmJoe
vmJoeVeeam MVP
posted in Alliance Vendor
Single production datacenter to offsite datacenter with Dell PowerEdge R760xd2 & Data Domain 6800 1,000 VMs

The environment described in this architecture is one main datacenter containing 1,000 VMs and 100 physical servers. Each VM and physical server has an average of 200 GB of used storage space. All backups will be targeted to a local primary backup repository and copied to a secondary offsite location. Proxies are installed on VMs and use the virtual appliance (hotadd) backup method. The primary Veeam Hardened repository will be on Dell PowerEdge R760xd2 server and the secondary repository will be on Data Domain 6800.

400
vmJoe
vmJoe
vmJoeVeeam MVP
posted in Alliance Vendor
Single production datacenter to offsite datacenter. Monitor and protect critical business data with Progress Flowmon

The environment described in this architecture is one datacenter containing 1,000 VMs and 100 servers. Each VM and server has an average of 100 GB of used storage space. All backups will be targeted to a local primary backup repository and copied to a secondary offsite location. Flowmon provides full network layer visibility of potential attacks so customers can leverage early detection and warnings to trigger data protection workflows in Veeam® Backup & Replication™ using the Veeam Incident API. 

1631
AndrePulia
vmJoe
vmJoeVeeam MVP
posted in Alliance Vendor
Nutanix AHV (500 VMs / 100TB) to Hardened Repository

The environment described in this architecture is one main datacenter with 500 Nutanix AHV VMs with 100TB of source data. All local backups will be targeted to Hardened Repositories grouped in a Scale-out Backup Repository. Offsite backups will also target Veeam Hardened Repositories. VMs will require 2vCPUs, 4GB of RAM, and 200GB of disk space.

1644
AndrePulia
vmJoe
vmJoeVeeam MVP
posted in Alliance Vendor
Single production datacenter to offsite datacenter with Dell PowerEdge R760xd2 1,000 VMs

The environment described in this architecture is one main datacenter containing 1,000 VMs and 100 physical servers. Each VM and physical server has an average of 200 GB of used storage space. All backups will be targeted to a local primary backup repository and copied to a secondary offsite location. Proxies are installed on VMs and use the virtual appliance (hotadd) backup method. The Veeam hardened repository will be on Dell PowerEdge R760xd2 servers.

1281
AndrePulia
vmJoe
vmJoeVeeam MVP
posted in Alliance Vendor
Single production datacenter to offsite datacenter with Dell PowerEdge R760xd2 10,000 VMs

The environment described in this architecture is one main datacenter containing 10,000 VMs and 100 physical servers. Each VM and physical server has an average of 200 GB of used storage space. All backups will be targeted to a local primary backup repository and copied to a secondary offsite location. Proxies are installed on VMs and use the virtual appliance (hotadd) backup method. The Veeam Hardened repository will be on Dell PowerEdge R760xd2 servers.

461
AndrePulia
vmJoe
vmJoeVeeam MVP
posted in Veeam Backup & Replication
Regional datacenter and remote site to VCCE in a central hub site – 10000 VMs

The environment described in this architecture consists of one Regional Datacenter with 10,000 VMs and 100 physical servers, and a ROBO site containing 100 VMs. All backups will be targeted to a local primary backup repository and copied to a secondary off-site location secured with Veeam Cloud Connect for the Enterprise (VCCE). #blueprint #veeam #reference architecture

791
AndrePulia
vmJoe
vmJoeVeeam MVP
posted in Veeam Backup & Replication
CDP Replication for Average Write Rate of 100 MB/s

Updated - V12.1The environment described in this architecture are two datacenters and multiple VMs in a cluster with a total average write rate of 100 MB/s, consuming 30 TB of primary storage. The VMs will be replicated from the primary datacenter to the target cluster in the secondary datacenter through continuous data protection (CDP). The source and target cluster will be managed by a single vCenter. Each datacenter will contain a CDP proxy that is installed on a physical server. The networking speed between components in each datacenter is 10 Gbps. #blueprint #veeam #reference architecture

1211
AndrePulia

Badge winners

Show all badges
Terms & Conditions