Installing and configuring Backup exec media server as a vm

1) Are we able to install Backup Exec as a media server? We need to backup the physical host, other hyper v VMs, and run NDMP backup to our HP MSL 4048 Tape library which is connected via fibre channel to our EMC VNX2 5200.

2)This is a crazy question, can we run the media server with domain credentials but not joined to the domain? We are concerned with ransomeware and would like to be configured this way as an additional measure of security.

3) Are there any security advantages of installing backup exec on a VM rather than a physical host? How easy would it be to restore all virtual systems and to do bare metal recoveries on pyhsical systems?

Please share any relevant documentation on this with me.

Thank you

Sam

 

Tags (2)
3 Solutions

Accepted Solutions
Accepted Solution!

Re: Installing and configuring Backup exec media server as a vm

For item 3), take note that the referenced article states that connecting a physical tape drive to a virtual BE Server is an alternative configuration.  This means that if there is any problem, you got to prove that the same problem exists when the tape drive is connected to a physical BE Server before you can get support.

Accepted Solution!

Re: Installing and configuring Backup exec media server as a vm

How is the ransomware going to encrypt a tape?
Accepted Solution!

Re: Installing and configuring Backup exec media server as a vm

@sfaizul  ransomware is only for disk storage

6 Replies

Re: Installing and configuring Backup exec media server as a vm

1) It is supported. Refer HCL https://www.veritas.com/support/en_US/article.100041309
2) Refer this for account requirement - https://www.veritas.com/support/en_US/article.100001916.html Also check out the whats new in 20.4. the product has some safety feature "ransomware resiliency" with 20.4
3) Better to keep BE on physica. Refer https://www.veritas.com/support/en_US/article.100020969.html

Accepted Solution!

Re: Installing and configuring Backup exec media server as a vm

For item 3), take note that the referenced article states that connecting a physical tape drive to a virtual BE Server is an alternative configuration.  This means that if there is any problem, you got to prove that the same problem exists when the tape drive is connected to a physical BE Server before you can get support.

Re: Installing and configuring Backup exec media server as a vm

Thank you Gurvinder.

Just a note I think the Ransomeware protection applies to disk backup and not to tape libraries. I am hoping something has changed and Backup Exec has protection against ransomeware for tape libraries.

Accepted Solution!

Re: Installing and configuring Backup exec media server as a vm

How is the ransomware going to encrypt a tape?
Accepted Solution!

Re: Installing and configuring Backup exec media server as a vm

@sfaizul  ransomware is only for disk storage

Re: Installing and configuring Backup exec media server as a vm

I should have clarified about tape backups or backup exec and ransomewware. We have heard that when a ransomeware attack happens and the attacker has the admin credentials they go after the backups by deleting them or formatting the tapes. Does veritas have any two factor authentication that can be setup to make it more difficult or suggest any other ways to protect against this?