cancel
Showing results for 
Search instead for 
Did you mean: 

NBU

jjimenez2
Level 5

Hi guys,

We have a set of questions particular on security of backup when using netbackup.

  1. If Encryption is not enabled in backup policy, what does the backup images on tape look like?
  2. How can we restore data from tapes if there's no available backup catalog?
  3. Or, if someone stole our backup tapes and they know it's a NBU data (assuming no encryption), how's the possibilities for them to restore and view the data?

thank you :)

1 ACCEPTED SOLUTION

Accepted Solutions

Nicolai
Moderator
Moderator
Partner    VIP   

1: The encryption option in the policy is software based, not recommended for performance reasons. Netbackup writes data to tape in a GNU tar format. Tar is a well known container format in the UNIX/Linux world.

2: You can import tapes. See  https://www.veritas.com/support/en_US/article.100017201. The import is a time consuming process so not recommended as a DR option.

3: In order to protect the confidiality of your data you should implement Netbackup KMS that will enable hardware based  encryption in tape drives. See https://www.veritas.com/support/en_US/doc/21733320-127424841-0/v21634609-127424841 & https://www.veritas.com/support/en_US/article.100020249 &  

Do careful planing your NBU KMS implementation, if you loose the keys for decrypting backup data, data will be gone for ever.

View solution in original post

2 REPLIES 2

Nicolai
Moderator
Moderator
Partner    VIP   

1: The encryption option in the policy is software based, not recommended for performance reasons. Netbackup writes data to tape in a GNU tar format. Tar is a well known container format in the UNIX/Linux world.

2: You can import tapes. See  https://www.veritas.com/support/en_US/article.100017201. The import is a time consuming process so not recommended as a DR option.

3: In order to protect the confidiality of your data you should implement Netbackup KMS that will enable hardware based  encryption in tape drives. See https://www.veritas.com/support/en_US/doc/21733320-127424841-0/v21634609-127424841 & https://www.veritas.com/support/en_US/article.100020249 &  

Do careful planing your NBU KMS implementation, if you loose the keys for decrypting backup data, data will be gone for ever.

StoneRam-Simon
Level 6
Partner    VIP    Accredited Certified
It is very easy to restore backup data if it's not encrypted.

Tranzman and other tools, can recover data from NetBackup and many other backup products ( TSM, Data protector, commvault, BackupExec) back to usable files, this includes most data types, such as email, filesystem, virtual machines and databases such as oracle and SQL. Tools such as Tranzman can even be used without any need for the original backup software or it's catalog.

If you want to stop someone reading a tape, you do need to look at encryption, especially for media that goes off-site.