PCs Backup software that can isolate backup destination to protect from Ransomware virus.
-
@BRRABill said in PCs Backup software that can isolate backup destination to protect from Ransomware virus.:
@scottalanmiller said in PCs Backup software that can isolate backup destination to protect from Ransomware virus.:
For desktop backups, you should look at AetherStore as well. Probably cheaper than a NAS, and better protection.
That new pricing come out yet?
Not officially, but it's available I think
@shannon can fill you in privately if you want to get up and running. -
@crustachio said in PCs Backup software that can isolate backup destination to protect from Ransomware virus.:
@scottalanmiller said in PCs Backup software that can isolate backup destination to protect from Ransomware virus.:
@openit said in PCs Backup software that can isolate backup destination to protect from Ransomware virus.:
The backup destination will be NAS box and we got around 100 PCs.
You must have a backup server in place between the PCs and the NAS in order to have any protection against ransomware, otherwise the ransomware can attack the NAS directly using the same permissions as the backup mechanism on the PCs.
NAS snapshots could mitigate this risk. Just like Exablox advertises Continuous Data Protection (CDP) as a remedy to ransomware - you can go back to any snapshot in 10 second intervals out until your retention policy limit (file level or share level).
Even basic QNAP and Synology boxes offer scheduled snapshots. Not necessarily a replacement for an intermediate backup server, just an option to consider.
I know about this option on QNAP, but unfortunately we need to have another NAS box to configure it (the snapshot cannot be set to in that NAS itself or any External HDD). Not sure about other brands.
So double cost in this case.
-
@JaredBusch said in PCs Backup software that can isolate backup destination to protect from Ransomware virus.:
@scottalanmiller said in PCs Backup software that can isolate backup destination to protect from Ransomware virus.:
@crustachio said in PCs Backup software that can isolate backup destination to protect from Ransomware virus.:
Also, to the OP's question... isn't any backup software capabl;e
@openit said in PCs Backup software that can isolate backup destination to protect from Ransomware virus.:
- Software that can isolate backup destination to protect from ransom-ware so that PC got infected will not effect backup target.
Isn't any backup software capable of this? As long as your backup storage target has unique permissions that can't be mapped, browsed or written by any domain users, the software you choose is irrelevant.
How does software do that when it is running on the compromised machine?
Using veeam endpoint, I specify creds in the application. It does not connect to the nas with user creds.
Would be great if Veeam can help, but there is no central management with it, so difficult to manage around 100 pcs.
-
@openit said in PCs Backup software that can isolate backup destination to protect from Ransomware virus.:
@JaredBusch said in PCs Backup software that can isolate backup destination to protect from Ransomware virus.:
@scottalanmiller said in PCs Backup software that can isolate backup destination to protect from Ransomware virus.:
@crustachio said in PCs Backup software that can isolate backup destination to protect from Ransomware virus.:
Also, to the OP's question... isn't any backup software capabl;e
@openit said in PCs Backup software that can isolate backup destination to protect from Ransomware virus.:
- Software that can isolate backup destination to protect from ransom-ware so that PC got infected will not effect backup target.
Isn't any backup software capable of this? As long as your backup storage target has unique permissions that can't be mapped, browsed or written by any domain users, the software you choose is irrelevant.
How does software do that when it is running on the compromised machine?
Using veeam endpoint, I specify creds in the application. It does not connect to the nas with user creds.
Would be great if Veeam can help, but there is no central management with it, so difficult to manage around 100 pcs.
Central Management options are in beta, so if you decide to go that route, you'll have central management very soon.
-
@openit said in PCs Backup software that can isolate backup destination to protect from Ransomware virus.:
@crustachio said in PCs Backup software that can isolate backup destination to protect from Ransomware virus.:
@scottalanmiller said in PCs Backup software that can isolate backup destination to protect from Ransomware virus.:
@openit said in PCs Backup software that can isolate backup destination to protect from Ransomware virus.:
The backup destination will be NAS box and we got around 100 PCs.
You must have a backup server in place between the PCs and the NAS in order to have any protection against ransomware, otherwise the ransomware can attack the NAS directly using the same permissions as the backup mechanism on the PCs.
NAS snapshots could mitigate this risk. Just like Exablox advertises Continuous Data Protection (CDP) as a remedy to ransomware - you can go back to any snapshot in 10 second intervals out until your retention policy limit (file level or share level).
Even basic QNAP and Synology boxes offer scheduled snapshots. Not necessarily a replacement for an intermediate backup server, just an option to consider.
I know about this option on QNAP, but unfortunately we need to have another NAS box to configure it (the snapshot cannot be set to in that NAS itself or any External HDD). Not sure about other brands.
So double cost in this case.
Snapshots should be local. I can't believe that QNAP has that limitation. But if it really does, just move to Synology or save more money with a SAM-SD and do it that way.
-
@scottalanmiller said in PCs Backup software that can isolate backup destination to protect from Ransomware virus.:
For desktop backups, you should look at AetherStore as well. Probably cheaper than a NAS, and better protection.
Sure I will have look at.
-
Snapshots should be local. I can't believe that QNAP has that limitation. But if it really does, just move to Synology or save more money with a SAM-SD and do it that way.
What's this SAM-SD by the way ? As I understand by googling, it's custom self build linux machine for storage purpose ?
-
Central Management options are in beta, so if you decide to go that route, you'll have central management very soon.
I was informed about Centralized Mgmt, and seems they are planning to commercialize the Free Edition too by next year, so after setting up 100 PCs by thinking it's free and don't want get shocked by commercial price, so I wanted to go with other commercial software for backup.
-
@openit said in PCs Backup software that can isolate backup destination to protect from Ransomware virus.:
Central Management options are in beta, so if you decide to go that route, you'll have central management very soon.
I was informed about Centralized Mgmt, and seems they are planning to commercialize the Free Edition too by next year, so after setting up 100 PCs by thinking it's free and don't want get shocked by commercial price, so I wanted to go with other commercial software for backup.
No way are they commercializing the free version. Where did you hear that? That's not a good reason to not do this at all. There is no way that they would pull that stunt, and if you fear that you will fear it from any vendor, so you can't use any free product. Then you are stuck using paid... and are still in the same boat. So logically, avoiding the right product today because it might not be the right product tomorrow is a worthless logical exercise because the only possible result is to use nothing.
-
If Veeam did do the unthinkable step of charging for this free, unlimited product.... then you just switch to something else at that time. Not a big deal. There really is no real risk.
-
@scottalanmiller said in PCs Backup software that can isolate backup destination to protect from Ransomware virus.:
@openit said in PCs Backup software that can isolate backup destination to protect from Ransomware virus.:
Central Management options are in beta, so if you decide to go that route, you'll have central management very soon.
I was informed about Centralized Mgmt, and seems they are planning to commercialize the Free Edition too by next year, so after setting up 100 PCs by thinking it's free and don't want get shocked by commercial price, so I wanted to go with other commercial software for backup.
No way are they commercializing the free version. Where did you hear that? That's not a good reason to not do this at all. There is no way that they would pull that stunt, and if you fear that you will fear it from any vendor, so you can't use any free product. Then you are stuck using paid... and are still in the same boat. So logically, avoiding the right product today because it might not be the right product tomorrow is a worthless logical exercise because the only possible result is to use nothing.
I guess from online chat or on phone call, I asked them directly, if there is any plans for commercializing Free edition, he said yes, not sure he have good idea about that.
-
@scottalanmiller said in PCs Backup software that can isolate backup destination to protect from Ransomware virus.:
If Veeam did do the unthinkable step of charging for this free, unlimited product.... then you just switch to something else at that time. Not a big deal. There really is no real risk.
I am thinking to have one time setup instead switching from one to another.
-
@openit said in PCs Backup software that can isolate backup destination to protect from Ransomware virus.:
@scottalanmiller said in PCs Backup software that can isolate backup destination to protect from Ransomware virus.:
@openit said in PCs Backup software that can isolate backup destination to protect from Ransomware virus.:
Central Management options are in beta, so if you decide to go that route, you'll have central management very soon.
I was informed about Centralized Mgmt, and seems they are planning to commercialize the Free Edition too by next year, so after setting up 100 PCs by thinking it's free and don't want get shocked by commercial price, so I wanted to go with other commercial software for backup.
No way are they commercializing the free version. Where did you hear that? That's not a good reason to not do this at all. There is no way that they would pull that stunt, and if you fear that you will fear it from any vendor, so you can't use any free product. Then you are stuck using paid... and are still in the same boat. So logically, avoiding the right product today because it might not be the right product tomorrow is a worthless logical exercise because the only possible result is to use nothing.
I guess from online chat or on phone call, I asked them directly, if there is any plans for commercializing Free edition, he said yes, not sure he have good idea about that.
I think that that is a misunderstanding. It's very public that they have a commercialization of the free edition, but the free edition isn't going away. They are just making ANOTHER version, that is based on the free version, that has central management. That one is not free. They've already announced that and put it in beta. I'm 99.99% confident that you just misunderstood what they meant by commercializing the free version, they didn't mean getting rid of it. They have commercial add ons that are additional.
-
@openit said in PCs Backup software that can isolate backup destination to protect from Ransomware virus.:
@scottalanmiller said in PCs Backup software that can isolate backup destination to protect from Ransomware virus.:
If Veeam did do the unthinkable step of charging for this free, unlimited product.... then you just switch to something else at that time. Not a big deal. There really is no real risk.
I am thinking to have one time setup instead switching from one to another.
That's minor and could apply to anything. But using something like PDQ Deploy, how much effort is that really? It's not zero, of course, but it isn't like there is any lock in. And since the risk is universal, you can't avoid it by using another product.
-
@scottalanmiller said in PCs Backup software that can isolate backup destination to protect from Ransomware virus.:
If Veeam did do the unthinkable step of charging for this free, unlimited product.... then you just switch to something else at that time. Not a big deal. There really is no real risk.
As you said, because of changes don't miss good one, so according to you VEP is good one ? but as earlier you mentioned, good to have PC -> Backup Server -> NAS, so I think this one not available for Veeam on Physical Machines, right ?
-
@scottalanmiller said in PCs Backup software that can isolate backup destination to protect from Ransomware virus.:
@openit said in PCs Backup software that can isolate backup destination to protect from Ransomware virus.:
@scottalanmiller said in PCs Backup software that can isolate backup destination to protect from Ransomware virus.:
@openit said in PCs Backup software that can isolate backup destination to protect from Ransomware virus.:
Central Management options are in beta, so if you decide to go that route, you'll have central management very soon.
I was informed about Centralized Mgmt, and seems they are planning to commercialize the Free Edition too by next year, so after setting up 100 PCs by thinking it's free and don't want get shocked by commercial price, so I wanted to go with other commercial software for backup.
No way are they commercializing the free version. Where did you hear that? That's not a good reason to not do this at all. There is no way that they would pull that stunt, and if you fear that you will fear it from any vendor, so you can't use any free product. Then you are stuck using paid... and are still in the same boat. So logically, avoiding the right product today because it might not be the right product tomorrow is a worthless logical exercise because the only possible result is to use nothing.
I guess from online chat or on phone call, I asked them directly, if there is any plans for commercializing Free edition, he said yes, not sure he have good idea about that.
I think that that is a misunderstanding. It's very public that they have a commercialization of the free edition, but the free edition isn't going away. They are just making ANOTHER version, that is based on the free version, that has central management. That one is not free. They've already announced that and put it in beta. I'm 99.99% confident that you just misunderstood what they meant by commercializing the free version, they didn't mean getting rid of it. They have commercial add ons that are additional.
Okay, that would be great, if my information is wrong. Also only Central Management should not be that much expensive compared to other vendors on overall.
-
@openit said in PCs Backup software that can isolate backup destination to protect from Ransomware virus.:
@scottalanmiller said in PCs Backup software that can isolate backup destination to protect from Ransomware virus.:
If Veeam did do the unthinkable step of charging for this free, unlimited product.... then you just switch to something else at that time. Not a big deal. There really is no real risk.
As you said, because of changes don't miss good one, so according to you VEP is good one ? but as earlier you mentioned, good to have PC -> Backup Server -> NAS, so I think this one not available for Veeam on Physical Machines, right ?
You are correct, the free one would not follow the PC -> backup server -> NAS solution. You'd need use another product. I don't believe that the paid version of Veeam works with physical machines (yet). It's also not currently centralized ( I don' tthink) I know if you buy the paid product, it can see the backups of the free one - so maybe you can do restores or something.. don't know haven't tried it.
-
FYI, most if not all paid products will have yearly maintenance costs - so you will be paying basically forever for it. If you buy a paid product, you should definitely pay for and maintain support/updates. If you aren't planning on doing that, then you should only look at 100% free solutions.
-
@openit said in PCs Backup software that can isolate backup destination to protect from Ransomware virus.:
@scottalanmiller said in PCs Backup software that can isolate backup destination to protect from Ransomware virus.:
If Veeam did do the unthinkable step of charging for this free, unlimited product.... then you just switch to something else at that time. Not a big deal. There really is no real risk.
As you said, because of changes don't miss good one, so according to you VEP is good one ? but as earlier you mentioned, good to have PC -> Backup Server -> NAS, so I think this one not available for Veeam on Physical Machines, right ?
Not yet, but will be soon in the commercial additions.
-
@openit said in PCs Backup software that can isolate backup destination to protect from Ransomware virus.:
@scottalanmiller said in PCs Backup software that can isolate backup destination to protect from Ransomware virus.:
@openit said in PCs Backup software that can isolate backup destination to protect from Ransomware virus.:
@scottalanmiller said in PCs Backup software that can isolate backup destination to protect from Ransomware virus.:
@openit said in PCs Backup software that can isolate backup destination to protect from Ransomware virus.:
Central Management options are in beta, so if you decide to go that route, you'll have central management very soon.
I was informed about Centralized Mgmt, and seems they are planning to commercialize the Free Edition too by next year, so after setting up 100 PCs by thinking it's free and don't want get shocked by commercial price, so I wanted to go with other commercial software for backup.
No way are they commercializing the free version. Where did you hear that? That's not a good reason to not do this at all. There is no way that they would pull that stunt, and if you fear that you will fear it from any vendor, so you can't use any free product. Then you are stuck using paid... and are still in the same boat. So logically, avoiding the right product today because it might not be the right product tomorrow is a worthless logical exercise because the only possible result is to use nothing.
I guess from online chat or on phone call, I asked them directly, if there is any plans for commercializing Free edition, he said yes, not sure he have good idea about that.
I think that that is a misunderstanding. It's very public that they have a commercialization of the free edition, but the free edition isn't going away. They are just making ANOTHER version, that is based on the free version, that has central management. That one is not free. They've already announced that and put it in beta. I'm 99.99% confident that you just misunderstood what they meant by commercializing the free version, they didn't mean getting rid of it. They have commercial add ons that are additional.
Okay, that would be great, if my information is wrong. Also only Central Management should not be that much expensive compared to other vendors on overall.
Probably a little more, Veeam isn't cheap.
