Veeam Technical Specialist

What is SureBackup?SureBackup is the Veeam technology that allows you to test machines backups and check if you can recover data from them. It tests the integrity of backups by performing randomized checks, including checksums, file, network and security integrity.SureBackup can help ensure that backups are valid and restorable, which is important for data protection and disaster recovery. It can also scan backups for malware and silent data corruption.SureBackup can:Detect corrupted backups/replicas. Test that virtual machines can boot. Test applications and their dependencies. Ensure regular consistent testing. Leverage your existing hardware: no need to buy additional servers. Randomize machine testing. Exclude designated machines.  Why is testing recoverability important?Testing recoverability is crucial for several reasons. It ensures data integrity by confirming that backups are not corrupted and can be restored successfully. This validation helps identify and address

What is multi-factor authentication?MFA (or sometimes known as Two-Factor Authentication, 2FA) is the principle that a user needs to provide more than one type of evidence to access an account. Evidence Required Examples Something you know Passwords and PINs, Security Questions Something you have OTP Tokens, U2F Tokens, Certificates, Smart Cards, Email, SMS, Phone Calls Something you are Biometrics (Fingerprints, Facial Recognition, Iris Scan) Somewhere you are Source IP, Geolocation, Geofencing Something you do Behavioral Profiling, Keystrokes/Mouse Dynamics  Why is multi-factor authentication important?Multi-factor authentication (MFA) is important because it’s a strong defence against password related attacks. Microsoft estimates accounts are 99.9% less likely to be able to be compromised if MFA is used. MFA with Veeam Backup & ReplicationVeeam Backup & Replication uses multi-factor auth

Veeam Backup & Replication provides a built-in tool to ensure that your backup server configuration follows security best practices for Veeam backup infrastructure components based on Microsoft Windows Server and Linux operating systems.To perform a security check, click Security & Compliance on the Home tab. Configuration parameters set up as recommended will have the Passed status. Security & Compliance Analyzer checks configuration parameters both for the operating system and Veeam products. You can implement these recommendations manually or use the automatic configuration script provided by Veeam.   Continue to Lesson 3: Multi-factor AuthenticationReturn to Course Outline

Veeam Threat Center OverviewThe Veeam Threat Center provides you with a complete and comprehensive view of your entire data protection landscape. The dashboard allows you to visualize what areas of your infrastructure are susceptible to a cyberattack, thus allowing you to remediate and fix any gaps in your environment in real time. By collecting these different data points about your product configuration you can take the necessary steps to implement best practices and guidelines.  Data Platform ScorecardThe Platform Security Compliance score gives a score that represents how compliant your environment is. The lower the score the more at risk you are of not being able to recover data in the event of a data recovery incident. You can obtain a report that shows the areas for improvement which will improve this score which can be shared and actioned in order to make necessary changes.The Data Recovery Score gives a score to indicate how healthy your backups are. This score is based on a m

You’ve equipped yourself with the introductory knowledge and skills to implement Cybersecurity & Disaster Recovery Security Concepts! Remember to continue exploring advanced features, test your setup regularly, and leverage the best practices shared in this course to maintain a reliable and efficient workflow.Close your browser window or exit this course. Continue to module 2

What is Four-eyes Authorization?Four-eyes authorization is a control mechanism that requires at least two people to approve a specific activity before it can be completed.What are the benefits of Four-Eyes Authorization? Security Transparency Compliance By requiring dual oversight for critical operations, the system mitigates risks associated with accidental or malicious changes, enhancing overall security. The detailed audit trail of all requests and approvals promotes accountability, providing clear records of who initiated and who authorized each critical action. This practice aligns with industry best practices and regulatory requirements, supporting the organization’s compliance efforts and enhancing its security posture.  Four-Eyes Authorization ScenarioTo bolster their data protection and operational security, a company decides to implement four-eyes authorization in their Veeam Backup & Replication environment. This method requires an additional layer of approval

What is encryption?One of the most powerful tools in your arsenal to protect your data is encryption. Data encryption uses cryptographic algorithms and a secret key to transform data into an unreadable and scrambled format. This ensures that even if encrypted data is intercepted and stolen, it cannot be deciphered or understood by unauthorized individuals. Only those who possess the secret key can decrypt and reverse the encryption, making the information readable again. Encryption provides a secure way to protect sensitive data and maintain confidentiality. Encryption vs PerformanceEncryption almost certainly will have an impact on performance, as it involves additional computational overhead to process and transform data into an encrypted format, similarly, there is a performance cost for decrypting the data in a restore scenario. The performance impact of encryption depends on several factors. Encryption Algorithm The choice of encryption algorithm can influence performance. So

What is immutability?For a backup to be “immutable” this means that it is unable to be changed or deleted. Typically, immutable backups can only be deleted once a set time period has expired. Immutable backup data is safe from potential changes or deletions during that time, meaning that its original integrity stays intact. Why is immutability important?Immutability is important because it adds an extra layer of security to your backups, ensuring that even in the event of a data loss incident, your data remains safe and unaltered after the fact.Immutability can help in situations like: Accidental deletion of production data  Corrupted or compromised production data  Insider malicious activity  A hacker attack modifies the retention policy   What are immutable backups? What are the Options for Immutability?There are a number of options for immutability with Veeam with links for additional information: Immutable on-premises storage: Veeam Hardened Repository: A disk-based storage s

 In protecting our data and ensuring recoverability we need a strategy, the 3-2-1 rule, originally attributed to photographer Peter Krogh, follows these requirements: 3 Copies of Data – Maintain three copies of data - the original, and at least two copies. 2 Different Media – Use two different media types for storage. 1 Copy Offsite – Keep one copy offsite to prevent the possibility of data loss due to a site-specific failure. In Veeam, we have made some amendments to the original rule: 2 Different Media – The original purpose of this rule was to combat the fact that if two drives are purchased at the same time, they were very likely to fail at the same time. In Veeam it would be more accurate to say "Media Platforms". Consider block, object, tape, appliance-types file systems based storage as different platforms for the purposes of this rule. Technically speaking they could be the same media - disk - but different protocol and storage platforms. The additional 1-0 reference specif

Zero Trust PrinciplesZero Trust refers to security principles based on the mottos “never trust, always verify” and “assume breach”. Always verifying approved access and operating under the assumption that breaches will happen.The cornerstone principles of Zero Trust include: Continual Monitoring and Verification Zero Trust operates on the premise that ongoing attacks can originate from both inside and outside the network. Continuous monitoring of users is essential, and no individual is automatically trusted. This necessitates the verification of user identity, device identity, and user privileges. To uphold the principle of continual verification, the system periodically logs users out and terminates device connections. Micro-segmentation Micro-segmentation is a strategy used to enhance network security by dividing the network into smaller, isolated segments. This approach limits the ability of attackers to move laterally within the network if a breach occurs. By creat

Regularly update Veeam componentsKeeping Veeam backup servers, management consoles, and other components up to date with the latest patches and updates to address any security vulnerabilities is an absolute must when it comes to security hygiene. Security PatchesBoth operating systems and software applications are susceptible to vulnerabilities exploited by malicious actors.  These bad actors can leverage weaknesses in the software's code, libraries, or other components to compromise the security of the operating system and/or software, granting them unauthorized access. CVE, which stands for Common Vulnerabilities and Exposures, serves as a standardized reference method for publicly disclosing and tracking known vulnerabilities and exposures in information security.After a CVE is publicized, it is expected that software vendors will make available solutions to address the vulnerability. These solutions may involve providing instructions on how to fix the issue or releasing a new versi

Introducing Veeam Cybersecurity & Disaster RecoveryIn the modern data protection landscape protecting data is as much about ensuring that we are complying with our protection strategies as it is about security. This course is designed to give you a view ‘over the fence’ into security  so you are prepared to play a critical role in protecting your organization's data, from both external threats such as external actors looking to compromise systems for ransomware purposes or internal incidents such as actions performed by disgruntled employees, playing your part in the shared responsibility of securing the environment using industry security standards and security best practices.Having a basic understanding of security is important for a backup administrator for several reasons: Protecting Backup Infrastructure Network security plays a critical role in safeguarding the backup infrastructure from unauthorized access, malicious activities, and potential vulnerabilities. A backup a

Congratulations on completing the course! You’ve taken an important step in mastering Veeam® Kasten for Kubernetes, gaining the skills to efficiently protect, manage, and recover your Kubernetes workloads. Let’s take a moment to review what you’ve learned and explore how to apply this knowledge in real-world scenarios. Core Components of Veeam Kasten: You now understand how Veeam Kasten integrates seamlessly with Kubernetes environments to perform backup, recovery, and disaster recovery operations. By leveraging its native Kubernetes API integration, you can ensure robust and scalable data protection for your workloads. Configuring and Managing Policies: You've explored how to create and manage policies, location profiles, and advanced features like immutability to secure data and meet organizational requirements. These tools enable operational consistency and protect against data loss. Troubleshooting and Best Practices: You’ve learned to troubleshoot common issues by gathering lo

Logs can be a great tool for diagnosing and resolving issues within your Veeam Kasten deployment. Gathering relevant debugging information lets you quickly identify the root causes of problems and implement effective solutions. Veeam Kasten provides a straightforward process for capturing logs and gathering diagnostic data to assist in troubleshooting. Troubleshooting with LogsWhen troubleshooting issues, administrators analyze logs from components like the main Kasten service, kanister pods, and storage controllers to identify failures, performance bottlenecks, or configuration problems.Kasten generates detailed logs across its control plane components, backup executors, and catalog services in the kasten-io namespace. Each component writes operational logs that track backup/restore jobs, configuration changes, and system events.Application Logs: Container stdout/stderr System Logs: kubelet, container runtime Event Logs: Kubernetes events Control Plane Logs: API server, scheduler,

Veeam Kasten Disaster Recovery (DR) aims to protect Kasten from underlying infrastructure failures. In particular, this feature provides the ability to recover the Kasten platform in case of various disasters, such as Kasten's accidental deletion, failure of the underlying storage that Kasten uses for its catalog, or even the accidental destruction of the Kubernetes cluster on which Kasten is deployed. Kasten Disaster RecoveryKasten Disaster Recovery (KDR) is an essential feature in Veeam Kasten because, without it, critical failures in the underlying infrastructure can result in devastating consequences for your data protection and management operations. Let's say your organization is dealing with accidental deletion of the Kasten platform, whether through human error or unexpected system failures; it could lead to the complete loss of your ability to manage backups, restore, and disaster recovery workflows. This disrupts operations and jeopardizes your ability to recover protected ap

Policies in Veeam Kasten are at the heart of protecting and managing your Kubernetes workloads. They allow you to automate backups, snapshots, and exports to keep your data secure and recoverable. In this module, you’ll explore how to create and run policies and learn about Blueprints, advanced scheduling, policy presets, and manual actions, which are all essential for scalable and efficient data management.Before exploring the specifics of creating and running policies, it's important to understand the foundational tools that make policies in Kasten flexible and scalable. One key tool is Blueprints, which enables tailored protection workflows for applications with unique requirements. What are Blueprints?Blueprints in Veeam Kasten are designed to provide tailored protection for workloads, ensuring that the specific needs of different applications are met during backup and recovery processes. Workloads refer to the applications or services running in a Kubernetes cluster. This could in

After installing Veeam Kasten and learning to access the Dashboard, we can explore its key features and capabilities. These tools are essential for managing and protecting your Kubernetes environments. You can use profiles as the backbone of Kasten’s data management workflows, defining and organizing the resources needed for your organization’s tasks. Creating Infrastructure ProfilesAn infrastructure profile provides the necessary credentials for Kasten to directly interact with storage infrastructure, primarily for snapshot operations in environments using legacy, in-tree storage provisioners.In most modern deployments, infrastructure profiles are not needed if the primary storage is managed via a CSI provisioner that supports creating and restoring VolumeSnapshots, as these operations are handled through the Kubernetes API server rather than directly with the storage system. However, in environments relying on in-tree provisioners, infrastructure profiles become essential. These are 

Setting up and maintaining Veeam Kasten ensures seamless data protection and management within Kubernetes environments. Now, we’ll explore the key aspects of installing Kasten, including best practices and configurations for a successful deployment. Whether you’re deploying Kasten for the first time or maintaining an existing setup, you’ll be equipped with the knowledge to manage installations and upgrades effectively. Getting Hands-on with Veeam KastenThis module will cover examples of the two most common installation methods, OpenShift Operator and Helm while providing some guidance to help you choose the best approach for your environment. Generally, the installation of Veeam Kasten can be categorized into two primary methods that are each suited to different needs:Veeam Kasten is available in different Operator editions: Veeam Kasten (Free): Free edition of Veeam Kasten for use in clusters up to 5 Nodes Veeam Kasten (Enterprise - PAYGO): Enterprise edition of Veeam Kasten, billed

Policies and Profiles are critical tools for data management within Veeam Kasten. Policies define the rules and behaviors for backup, recovery, and other data protection actions by specifying what actions to take, when, and under what conditions. Profiles define access to external resources, either by enabling direct integration with primary storage for orchestrating storage snapshots (Infrastructure Profiles) or by specifying secondary storage locations and credentials for exporting backup data (Location Profiles). Picture This!Your Kubernetes environment runs effortlessly, with a seamless data management system that works quietly in the background, ensuring every piece of critical information is protected and recoverable. Backups occur automatically without disrupting your operations, and data is always available precisely when and where you need it. Your team no longer must worry about compliance or recovery failures. Everything is set up to scale with your business needs, adapt to

The Veeam Kasten data management platform is tailor-made for Kubernetes, offering enterprise teams a scalable, secure, and intuitive system for backing up, restoring, and recovering Kubernetes applications. Kasten's application-centric approach, deeply integrated with databases, Kubernetes distributions, and cloud environments, streamlines operations without constraining infrastructure choices. Supporting native Kubernetes APIs, it features robust consistency, automatic application discovery, multi-cloud mobility, and a sophisticated web interface, all within a policy-driven, flexible architecture.Veeam Kasten delivers comprehensive features to simplify your Kubernetes data protection. It enables native backup and recovery for stateful Kubernetes applications using Kubernetes APIs, eliminating the need for intermediary storage layers. With support for on-premises environments and cloud platforms like GKE, AKS, and EKS, Kasten provides users with seamless protection across hybrid and mu

You’ve equipped yourself with the introductory knowledge and skills to work with Veeam Backup for Entra ID! Remember to continue exploring advanced features, test your setup regularly, and leverage the best practices shared in this course to maintain a reliable and efficient workflow.Close your browser window or exit this course.Return to Course Outline

Performing Backup JobsVeeam Backup for Microsoft Entra ID supports two types of backup jobs: Tenant backup jobs that protect tenant data — users, groups, administrative units, roles and applications. Log jobs that protect tenant audit and sign-in logs.  Launch New Microsoft Entra ID Tenant Backup Job Wizard To create a Microsoft Entra ID tenant backup job, do one of the following: Open the Home view. On the ribbon, click Backup Job > Microsoft Entra ID > Tenant. Open the Home view. In the inventory pane, right-click Jobs and select Backup > Microsoft Entra ID > Tenant.  Step 1: Specify Job Name and Description At the Name step of the wizard, specify a name and description for the job. Step 2: Advanced > Encryption SettingsTo specify encryption settings for the file backup job: At the Tenant step of the wizard, click Advanced. On the Encryption tab, select the Enable backup data encryption check box to encrypt the backups. From the Password drop-down list, select

Configuring Log and Cache RepositoriesTo protect Microsoft Entra ID tenant data and logs, you require the following repositories:Cache repository that stores temporary cache files for log processing. Primary log backup repository. [Optional] Secondary log backup repository that stores copies of log backups. By default, the backup server can perform the roles of cache and primary log backup repositories.You can also configure other types of repositories to keep data in another location. The following types of repositories are supported for all repositories (the cache, primary and secondary repositories):Direct Attached Storage: Microsoft Windows or Linux physical or virtual machines. Network attached storage: SMB (CIFS) shares or NFS shares. The following types of repositories are supported only for the primary and secondary log backup repositories:Direct attached storage: Hardened repositories Deduplicating storage appliances: ExaGrid, Quantum DXi, Dell Data Domain or other Back

Veeam Backup for Entra IDVeeam Backup for Microsoft Entra ID is a specialized solution designed for the protection and disaster recovery of Microsoft Entra ID environments. This tool enables administrators and engineers to implement robust backup strategies and ensure data integrity. Below are the key functionalities and operations that can be performed using this solution:Backup of Entra ID Tenants - You can create backups of Microsoft Entra ID tenants, which are stored in PostgreSQL databases. This allows for efficient data management and retrieval in case of outages or data loss. Backup of Audit Logs - The solution facilitates the creation of backups for Microsoft Entra ID audit and sign-in logs. These logs are essential for monitoring activities and compliance. They can be stored in designated backup repositories to ensure they are preserved and easily accessible for analysis. Restoration of Identity Components - Veeam Backup for Microsoft Entra ID provides the capability to restor

You’ve equipped yourself with the introductory knowledge and skills to work with Veeam Backup for Salesforce! Remember to continue exploring advanced features, test your setup regularly, and leverage the best practices shared in this course to maintain a reliable and efficient workflow.Close your browser window or exit this course. Continue to module 3