Sysfacts Logo
de_DE DE
de_DE DE
  • Objective
  • Achievements
  • Insights
  • Services

E-Mail

Tel.

hello@sysfacts.com +49 221 670572 0
Contact Us
  • Objective
  • Achievements
  • Insights
  • Services
  • Contact
  • News
  • Case Studies
  • Careers

Sysfacts AG
Rudolfplatz 3
50674 Cologne
Germany
—

E-Mail

Tel.

hello@sysfacts.com +49 221 670572 0
de_DE DE
de_DE DE
Post Thumbnail
Return to articles

Date → 28 • March • 2023

Author → Yannick Haymann

Immutable backups – protection against ransomware

386 words •

IT infrastructure

Share on Linkedin

Share on Facebook

Share on Twitter

SHARE

Strictly speaking, a backup solution is of course not a protection against ransomware, but a protection against the negative consequences or a way to mitigate these consequences. 😉

But now to the topic: Veeam Hardened Repository is an exciting solution for securing backups against ransomware attacks because of its robust set of features designed to protect data and ensure its integrity.

Immutable backups, from a technical perspective, work by employing a combination of storage technologies and access controls to prevent modifications and deletions of backup data for a predefined period. The primary technology used to achieve immutability is Object Lock, which is available on certain storage platforms like Amazon S3 and other S3-compatible storage systems. Here is a step-by-step explanation of how immutable backups work:

  1. Backup creation: When a backup is created using Veeam Backup & Replication, the backup data is stored as objects in a compatible storage system that supports Object Lock, such as Amazon S3 or other S3-compatible storage solutions.
  2. Object Lock configuration: When configuring the backup repository, the user enables Object Lock and defines a retention period for the immutability. The retention period determines the duration for which the backup data will be protected from modifications and deletions.
  3. Write Once, Read Many (WORM): Once the backup is stored in the Object Lock-enabled storage, the storage system applies a WORM (Write Once, Read Many) policy to the data. This policy ensures that the data can only be written once and read multiple times, but cannot be modified or deleted until the retention period expires.
  4. Access control: To further strengthen the immutability of backups, access controls are put in place to prevent unauthorized users from changing the retention settings or deleting the data. This is typically achieved through role-based access control (RBAC), which restricts permissions based on user roles.
  5. Retention expiration: When the retention period expires, the immutability protection is automatically lifted, and the backup data can be modified or deleted as needed. Administrators can also extend the retention period if necessary.

In summary, immutable backups work by leveraging storage technologies like Object Lock and access controls like RBAC to prevent data modifications and deletions during a specified retention period. This approach helps ensure that backup data remains unaltered and safe from ransomware attacks or accidental deletions, allowing organizations to recover their systems confidently.

IT infrastructure
Post Thumbnail
Domain Controller vs. Active Directory

Date → 30 • March • 2023

Author → Yannick Haymann

Read More
IT infrastructure
Post Thumbnail
Public cloud vs. own servers: do the math!

Date → 20 • March • 2023

Author → Yannick Haymann

Read More

Accelerate your IT Infrastructure.

Schedule Consultation

About

  • Objective
  • Achievements
  • Insights
  • Contact Us

Services

  • IT Transformation
  • Microsoft 365 Migration
  • Disaster Recovery
  • Advanced Housing

Resources

  • Careers
  • Schedule a consultation
  • Case Studies
  • News

Legal

  • Imprint
  • Terms & Conditions
  • Privacy Policy

Our Clients

Partner Logo
Partner Logo
Partner Logo
Partner Logo
Partner Logo
Partner Logo
Partner Logo
Partner Logo
Partner Logo
Partner Logo
Partner Logo
Partner Logo
Partner Logo
Partner Logo
Partner Logo
Partner Logo
Partner Logo
Partner Logo
LinkedIn Xing Instagram

© 2023 Sysfacts AG

LinkedIn Xing Instagram

Designed by Alphamark™

Cookie Consent

By clicking “Accept Cookies”, you agree to the storing of cookies on your device to enhance site navigation, analyze site usage and assist in our marketing efforts. Privacy Policy

Accept AllCookies Settings
Manage consent

Privacy Overview

This website uses cookies to improve your experience while you navigate through the website. Out of these, the cookies that are categorized as necessary are stored on your browser as they are essential for the working of basic functionalities of the website. We also use third-party cookies that help us analyze and understand how you use this website. These cookies will be stored in your browser only with your consent. You also have the option to opt-out of these cookies. But opting out of some of these cookies may affect your browsing experience.
Necessary
Always Enabled
Necessary cookies are absolutely essential for the website to function properly. These cookies ensure basic functionalities and security features of the website, anonymously.
CookieDurationDescription
cookielawinfo-checkbox-analytics11 monthsThis cookie is set by GDPR Cookie Consent plugin. The cookie is used to store the user consent for the cookies in the category "Analytics".
cookielawinfo-checkbox-functional11 monthsThe cookie is set by GDPR cookie consent to record the user consent for the cookies in the category "Functional".
cookielawinfo-checkbox-necessary11 monthsThis cookie is set by GDPR Cookie Consent plugin. The cookies is used to store the user consent for the cookies in the category "Necessary".
cookielawinfo-checkbox-others11 monthsThis cookie is set by GDPR Cookie Consent plugin. The cookie is used to store the user consent for the cookies in the category "Other.
cookielawinfo-checkbox-performance11 monthsThis cookie is set by GDPR Cookie Consent plugin. The cookie is used to store the user consent for the cookies in the category "Performance".
viewed_cookie_policy11 monthsThe cookie is set by the GDPR Cookie Consent plugin and is used to store whether or not user has consented to the use of cookies. It does not store any personal data.
Functional
Functional cookies help to perform certain functionalities like sharing the content of the website on social media platforms, collect feedbacks, and other third-party features.
Performance
Performance cookies are used to understand and analyze the key performance indexes of the website which helps in delivering a better user experience for the visitors.
Analytics
Analytical cookies are used to understand how visitors interact with the website. These cookies help provide information on metrics the number of visitors, bounce rate, traffic source, etc.
Advertisement
Advertisement cookies are used to provide visitors with relevant ads and marketing campaigns. These cookies track visitors across websites and collect information to provide customized ads.
Others
Other uncategorized cookies are those that are being analyzed and have not been classified into a category as yet.
SAVE & ACCEPT
en_US EN
en_US EN
de_DE DE