asked on
How to backup TB of individual files that change often while protecting from Ransomeware?
Looking for suggestions on how to backup NAS devices or SAN with 20+ TB of data that can help to protect from Ransomeware. I have been just using replication to backup to other storage solutions. However if I get hit with Crypto then it will encrypt the other storage as well. This is a photography studio and they add tons of images weekly. So I'm looking for backups solutions and ideas.
You may backup encrypted files in the last few runs, but the full and incr/diff from BEFORE the attack, are still there to be restored easily.
Use this BESIDES your replication solution for the fastest way to restore. That's because the replication probably won't be all attacked at once, only single departments. So restoring only those departments will be the fastest way.
Set up for the required amount of backup space on a dedicated NAS plus growth.
Set up a Scale-Out Backup Repository (SOBR) in Veeam that includes the above as well as a BackBlaze B2 bucket pair:
Bucket 1: Immutable for 30 to 90 days (you choose based on requirements)
Bucket 2: Not Immutable
Configure your backups for local storage.
Configure your cloud tier copies based on what needs to be protected from ransomware encryption.
B2 is the best cost and the best business model for cloud backup storage IMNSHO.
ASKER
snapshot hackers can't encrypte
Once they have everything "cleaned up" they then fire off the encryption malware.
Things are pretty sophisticated on that end now.
Some are even going so far as to copy data off and use that as hostage instead of encryption.
but because i did configured snapshot shot on our backup storage
i manged to recover 98% of our systems and data
shadow copy Microsoft is not a good idea here
You got lucky. Perps are getting very skilled at gaining access to storage to delete snapshots.
The other aspect is they make changes based on file access dates killing the older stuff first that no one would notice. Then, the snapshot copies to another NAS/SAN are toast over time.
There's no foolproof way out of this short of immutable. We do so with a Veeam Scale-Out Backup Repository setup as mentioned above.
Computer data storage, often called storage or memory, is a technology consisting of computer components and recording media used to retain digital data. In addition to local storage devices like CD and DVD readers, hard drives and flash drives, solid state drives can hold enormous amounts of data in a very small device. Cloud services and other new forms of remote storage also add to the capacity of devices and their ability to access more data without building additional data storage into a device.
TRUSTED BY
