We help IT Professionals succeed at work.

Veeam Data Center Solutions - Your Thoughts

WORKS2011
WORKS2011 used Ask the Experts™
on
Planning on switching out our backup software from StorageCraft to Veeam.

Question on data centers. SC provides their own datacenter and Veeam doesn't. We already have other services configured with Amazon S3 so it's likely we'll use their services and replicate backups here. Anyone have any other recommendations or data centers they recommend?
Comment
Watch Question

Do more with

Expert Office
EXPERT OFFICE® is a registered trademark of EXPERTS EXCHANGE®
Andrew Hancock (VMware vExpert / EE Fellow)VMware and Virtualization Consultant
Fellow 2018
Expert of the Year 2017

Commented:
We use Backblaze the cheapest of them ALL

Also Veeam is the World Leader!
Technical Architect - HA/Compute/Storage
Commented:
We've been slowly migrating all of our managed clients to Veeam from ShadowProtect as well.

There are many ways to approach this.

StarWind makes a Virtual Tape Library software setup that can be configured as a backup destination. From there, it can archive to BackBlaze which is the least expensive option per Terabyte out there. Great company too!

Another option would be to pick-up a contract with a Veeam CloudConnect provider to use as a cloud tier and use the VTL as a secondary backup.

The principle thing to pay attention to is an air-gap between the backup and the production network. Veeam makes this really easy as the entire Veeam setup can run in its own workroup or AD and reach in to the production network using AD defined usernames and passwords for host and guest access along with in-guest acquiescence (Exchange/SQL log consolidation).

CloudConnect providers can also lock-out backups to not allow deletes during a window.

If and when this process begins, I highly suggest setting up a honeypot to catch an encryption event and File Resource Manager to fire off e-mails when it gets hit. This will help prevent a slow encryption event process thus backups being done in.
WORKS2011Managed IT Services, Cyber Security, Backup

Author

Commented:
Another option would be to pick-up a contract with a Veeam CloudConnect provider to use as a cloud tier and use the VTL as a secondary backup.
@Philip, I believe this is the route we're taking. Makes sense to go this route while infusing new software. Second phase will be to use out own AWS if it fits our model.

The principle thing to pay attention to is an air-gap between the backup and the production network.
By this I assume you mean any lag that may be created for whatever reason. All our clients have decent bandwidth since prices have dropped so much. Once the seed file is created we don't have that many issues with the incrementals getting to the data center. Or, are you referring to a possible gap between backup software and the VM's, hardware, AD, etc.?

CloudConnect providers can also lock-out backups to not allow deletes during a window.
I'll ask more about this when choosing one. Do you have a cloud connect provider you recommend?

Honeypot? I'm assuming you mean if we host backups on our own AWS, correct.

@Andrew, when it comes to cheap backups this keeps me up at night :-) I'm assuming thought the product works well?

Thanks to both of you for the info.
Philip ElderTechnical Architect - HA/Compute/Storage

Commented:
An "air-gap" is exactly that: A gap between the production environment and the backup system that presents a barrier to any baddies that get in and start wreaking havoc on the production network (encryption events).

A "Honeypot" in this case is a set of folders and files that look sensitive. When the encryption malware hits them the File Resource Manager would e-mail the admin to let them know something bad is happening. Traditionally, a "HoneyPot" is a server set up and exposed to the Internet to see how long and what compromises it. Another form is e-mail addresses set up to capture e-mail for scanning by security folks.
Andrew Hancock (VMware vExpert / EE Fellow)VMware and Virtualization Consultant
Fellow 2018
Expert of the Year 2017

Commented:
I'm not referring to a product of sorts.

But the Backblaze service is the cheapest solution available for storage. All it is is storage no different to Google, AWS, Azure, Box we encryt before it goes over the wire.

and we also use Tresorit which is best for secured data.

It's up to you where you store your off site data.

We have and most of our clients have backups in 3 locations.

A backup is not a backup if not in three places!
WORKS2011Managed IT Services, Cyber Security, Backup

Author

Commented:
But the Backblaze service is the cheapest solution available for storage. All it is is storage no different to Google, AWS, Azure, Box we encryt before it goes over the wire.
@Andrew, nice, I shouldn't have referenced it as cheap if it works. Nice to have a working product and low price-point. Can you run images from the cloud or are you backing up data only. I agree with the redundancy as well, we've always gone with three locations ourselves.

Checking out Tresorit. With StorageCraft the data itself was encrypted so it didn't have to be in transit or with anymore at the datacenter.

@Philip, I've done something like this for attacks on my clients networks. Crazy world out there huh.
Andrew Hancock (VMware vExpert / EE Fellow)VMware and Virtualization Consultant
Fellow 2018
Expert of the Year 2017

Commented:
Depends on how you use and configure Backblaze, but traditionally it's just Storage.

DR is a very different thing to backup.
WORKS2011Managed IT Services, Cyber Security, Backup

Author

Commented:
Ended up going with a datacenter that has the Veeam Cloud Connect. Appreciate the input.