We currently use Veeam and Veeam Copy Jobs to an Exagrid de-duplicating appliance. Exagrid automatically sync's our data center backups to our remote office. To supplement that, and to protect against a ransomware attack, we want cloud air-gapped backups. We presently use Veeam copy jobs to iLand for that purpose but it's not going well.
We are about to demo CommVault but I figured before doing so, maybe I should take a step back and ask for thoughts on:
CommVault vs. Zert0
The ONLY thing I like about Veeam copy jobs to a cloud provider is the provider's "insider protection" which basically is a cloud based "recycle bin" which even a malicious admin can't touch.
We don't enjoy the overly complex nature of hundreds of Veeam backup jobs and copy jobs. It's a nightmare to monitor and maintain.
CommVault sounds much simpler.
I don't know anything about Zert0 other than it offers granular restores to the minute which could be super handy during a ransomware attack (assuming they don't successfully attack our backups).
I suppose the air-gapped-ness depends on the destination provider for both CommVault and Zert0.
Do these solutions typically rely on things like Amazon's Object Lock / Compliance Mode / WORM (write-once-read-many)?
A big requirement is MFA in order to delete backup containers; my nightmare scenario is my laptop getting hijacked and/or my admin credentials getting compromised and ransomware hacker attacking my cloud backups too !!!
Any thoughts would be valued and much appreciated.