07-03-2019 03:07 PM
1) Are we able to install Backup Exec as a media server? We need to backup the physical host, other hyper v VMs, and run NDMP backup to our HP MSL 4048 Tape library which is connected via fibre channel to our EMC VNX2 5200.
2)This is a crazy question, can we run the media server with domain credentials but not joined to the domain? We are concerned with ransomeware and would like to be configured this way as an additional measure of security.
3) Are there any security advantages of installing backup exec on a VM rather than a physical host? How easy would it be to restore all virtual systems and to do bare metal recoveries on pyhsical systems?
Please share any relevant documentation on this with me.
Thank you
Sam
Solved! Go to Solution.
07-03-2019 10:28 PM
For item 3), take note that the referenced article states that connecting a physical tape drive to a virtual BE Server is an alternative configuration. This means that if there is any problem, you got to prove that the same problem exists when the tape drive is connected to a physical BE Server before you can get support.
07-11-2019 06:08 PM
07-21-2019 07:19 PM
@sfaizul ransomware is only for disk storage
07-03-2019 08:35 PM
1) It is supported. Refer HCL https://www.veritas.com/support/en_US/article.100041309
2) Refer this for account requirement - https://www.veritas.com/support/en_US/article.100001916.html Also check out the whats new in 20.4. the product has some safety feature "ransomware resiliency" with 20.4
3) Better to keep BE on physica. Refer https://www.veritas.com/support/en_US/article.100020969.html
07-03-2019 10:28 PM
For item 3), take note that the referenced article states that connecting a physical tape drive to a virtual BE Server is an alternative configuration. This means that if there is any problem, you got to prove that the same problem exists when the tape drive is connected to a physical BE Server before you can get support.
07-11-2019 01:37 PM
Thank you Gurvinder.
Just a note I think the Ransomeware protection applies to disk backup and not to tape libraries. I am hoping something has changed and Backup Exec has protection against ransomeware for tape libraries.
07-11-2019 06:08 PM
07-21-2019 07:19 PM
@sfaizul ransomware is only for disk storage
07-22-2019 02:27 PM
I should have clarified about tape backups or backup exec and ransomewware. We have heard that when a ransomeware attack happens and the attacker has the admin credentials they go after the backups by deleting them or formatting the tapes. Does veritas have any two factor authentication that can be setup to make it more difficult or suggest any other ways to protect against this?