If you continue to position backups only as a tool to protect against threats of the level "If the disk breaks, I will have where to get a copy of the files," then I have great news for you. The entire backup industry has long worked on the principle of an insurance policy: our task is to ensure the safety and availability of data, regardless of which threat model you use for yourself. And if the stories about crumbled disks and collapsed raids have long caused only gnashing of sand on their teeth, then the threat of losing access to information due to the actions of ransomware programs is bypassed by many and not considered important enough. But the attackers also do not stand still and expand the functionality of their creations, which has long stepped over the algorithm “encrypt local disk> demand to transfer bitcoins”.
, . , . Veeam , . - “ -, , , N ”, . , .
, . . RDP, SSH, . , . - . , . : . . , .
, , . ? . . . , — , , . , , .
, , — . , , . , . , , - , . . , , .
— , , , . , , . , . ? — . , . , , : , .
, , . best practices . , . , . , - . , , , - . , , , . , . . Veeam, .
, “ ”. , .
-, , — . 3-2-1 ( , , ) - , , . , . - , , . .
, , . , ? , . , , . VLAN VPN , ? , , , . ?
, , Veeam Backup & Replication:
Immutable Backups. , AWS S3, S3- . , . , , . , .
. . , , - . : , . , , , .
. , . — . , , .
. , , . , , , .
Veeam Cloud Connect. , . , .
. , , . - . Veeam . Veeam Agent, , , , . , .
, ? . : ( , ) , . , , . , , . , . , ? , .
, IOPs, . Veeam One Possible ransomware activity. , . , , - , . , , CPU. , . , , . , .
— Suspicious incremental backup size. , . , , , , , 90% .
, — . , . , . . . : , ? , false-positive . , — , . , ? , , . ? , . Veeam One , . .
, , . -, . , . — . , . VLAN’, — , , ? Veeam - Secure Restore. . , . . , , . .
: — , , - . , :
.
.
.
. . .