asked on

Encrypt VM. Worth it against Ransomware?

Having in mind what's happening to Kaseya, I was wondering if VM Encryption (vCenter 6.7) would help or not protecting the VM from Ransomware. What do you think about it?

ASKER CERTIFIED SOLUTION

Dr. Klahn

membership

Create a free account to see this answer

Signing up is free and takes 30 seconds. No credit card required.

See answer

SOLUTION

Andrew Hancock (VMware vExpert PRO / EE Fellow/British Beekeeper)

membership

Create a free account to see this answer

Signing up is free and takes 30 seconds. No credit card required.

See answer

SOLUTION

Mr Tortu(r)e

membership

Create a free account to see this answer

Signing up is free and takes 30 seconds. No credit card required.

See answer

strivoli

ASKER

Thank you to the Experts that provided opinions and suggestions. I will not consider encryption. I believe the Backup Process is reasonably good (if I could have unlimited financiary resources, could be better - never happened in the past and will never happen in the future). That said, I've planned a Full Restore on a separate Environment using the Full Backup located in a set of Encrypted Tapes in order to make sure the DR (Disaster Recovery) runs fine as it should.

rindi

Since you are backing up to tapes, you are in my point of view in a better position than many others. Tapes have the advantage of not being accessible directly, you need the backup software to get access to them. You also can't easily edit data that is already on tape. So ransomware can't easily also compromise the tapes. Besides that tapes that aren't in the tape drive are inaccessible to people who aren't onsite.
But many people today backup to disk-drives or to online sites, & and these can be manipulated by ransomware...

strivoli

ASKER

Hi rindi, thanks for your thoughts. I Backup also to Tape. In order to follow the 3-2-1 Rule, I Backup to Disk, partially to Cloud (because of limited bandwidth) and to Tape. I'm an "old school" IT Manager and I still believe on the usefulness of the Tape. Besides what you wrote, I can move the Tapes easily and keep copies of them offsite.