VEEAM BACKUP HYPER V SOFTWARE
The backup software console should be available via a Privileged Access Workstation or jump server only.
VEEAM BACKUP HYPER V MOD
The credentials for READ access should be closely managed with no MOD access via anywhere beyond the local console. It must be isolated and air-gapped! Isolation and Air-Gapsįirst, that means that at no point in the backup structure can anyone on the production network have access to the backup files without at least a credentials prompt. Now, what is _ the most important_ aspect to our backup setup? The download speeds are mostly not capable of a decent recovery time either. With our last mile issue up here in Canada we are mindful about anything Cloud since most upload speeds are not capable enough. Both require a decryption password ( we always set this up).ShadowProtect requires their software to be installed before a backup can be mounted ( freebie download though).Veeam has the freebie Veeam Explorer to mount backup files ( not tied to the software being installed ever).Veeam and ShadowProtect backup files are independent of the backup software.Current, off-site 1, off-site 2, 6 Month, 12 Month, ETC….
With the abundance of malware and ransomware it’s absolutely necessary that we take the time to examine our virtualization host and backup structures.