Skip to main content
Solved

Immutable backups on a NAS

P

What do you guys think of installing ubuntu server as  a VM on Qnap 8Bay - Raid 10 NAS.

Then pushing Immutable backups to it. The NAS will not be connected to the internet.

I would love to learn the possible risks and vulnerabilities of this?

We still follow the 3:2:1 rule. This is just for extra.

Thanks all.

Jay

 

Best answer by Chris.Childerhose

Yeah this would be an added layer for sure.  Not a bad idea.

View original
    Did this topic help you find an answer to your question?

    7 comments

    Chris.Childerhose
    Forum|alt.badge.img+21
    • Chris.Childerhose
    • Veeam Legend, Veeam Vanguard
    • 8440 comments
    • Answer
    • June 24, 2021

    Yeah this would be an added layer for sure.  Not a bad idea.

    Chris Childerhose - VMCA2024 | VMCE2023 | VMCE-SP2024 | Veeam Vanguard 8* | Veeam Legend 5* | vExpert 6* | VCAP-DCV/VCP-DCV | Object First Ace | Cisco Champion | Twitter: @cchilderhose | Blog Site – https://just-virtualization.tech
    BertrandFR
    Nico Losschaert
    I
    4 people like this
    • BertrandFR
      BertrandFR
    • Nico Losschaert
      Nico Losschaert
    • I
      Inder
    • P
      Pegasus
    P
    • Pegasus
    • Author
    • Comes here often
    • 20 comments
    • June 24, 2021

    Thanks, I will have to connect it to the internet from time to time for Firmware Updates.

    Thanks for your input. I really appreciate it.

    Jay

    Chris.Childerhose
    coolsport00
    BertrandFR
    4 people like this
    • Chris.Childerhose
      Chris.Childerhose
    • coolsport00
      coolsport00
    • BertrandFR
      BertrandFR
    • Nico Losschaert
      Nico Losschaert
    Chris.Childerhose
    Forum|alt.badge.img+21

    Not a problem at all.

    Chris Childerhose - VMCA2024 | VMCE2023 | VMCE-SP2024 | Veeam Vanguard 8* | Veeam Legend 5* | vExpert 6* | VCAP-DCV/VCP-DCV | Object First Ace | Cisco Champion | Twitter: @cchilderhose | Blog Site – https://just-virtualization.tech
    coolsport00
    1 person likes this
    • coolsport00
      coolsport00
    regnor
    Forum|alt.badge.img+14
    • regnor
    • Veeam MVP
    • 1352 comments
    • June 25, 2021

    Sounds like a good idea to increase the security of your backups. After setting everything up, you should disable any kind of remote management, so that neither the VM nor the NAS can be accessed or managed. Is it possible to put the management of a QNAP on a dedicated NIC? If so, then I would just disconnect this NIC and connect it only for maintenance.

    Max M. | Systems Engineer @Veeam | VMCE/VMCA | VeeaMVP 2023 | former Legend & Vanguard
    Chris.Childerhose
    BertrandFR
    Nico Losschaert
    3 people like this
    • Chris.Childerhose
      Chris.Childerhose
    • BertrandFR
      BertrandFR
    • Nico Losschaert
      Nico Losschaert
    Nico Losschaert
    Forum|alt.badge.img+12
    • Nico Losschaert
    • On the path to Greatness
    • 681 comments
    • June 25, 2021

    Good idea @regnor regarding this disconnecting the NIC

    #Veeam Legend 5* | VMCA 3* | VMCE 4* | VMTSP+ 2* | VMSP 2* | DCIE 2* | Loves Best Practices | Twitter : @NLosschaert
    Chris.Childerhose
    regnor
    BertrandFR
    3 people like this
    • Chris.Childerhose
      Chris.Childerhose
    • regnor
      regnor
    • BertrandFR
      BertrandFR
    regnor
    Forum|alt.badge.img+14
    • regnor
    • Veeam MVP
    • 1352 comments
    • June 25, 2021
    Nico Losschaert wrote:

    Good idea @regnor regarding this disconnecting the NIC


    I'm not sure if that's even possible on NAS appliances as opposed to hardware servers where I would disconnect the RMM and disable SSH. At least the smaller appliances with only a single NIC won't have this capability I think.

    Max M. | Systems Engineer @Veeam | VMCE/VMCA | VeeaMVP 2023 | former Legend & Vanguard
    P
    • Pegasus
    • Author
    • Comes here often
    • 20 comments
    • June 25, 2021

    Great Ideas!!!

    Comment


    Terms & Conditions