topic HPE storeonce Ransomware attacks in StoreOnce Backup Storage

HPE storeonce Ransomware attacks

ledvan — Tue, 20 Jun 2023 03:14:31 GMT

hi guys,

we are using veeam software to backup our data to storeonce then backuped again to a MSL tape library, i wanted to know is there any chance when the production environment was attacked by ransomware , could the backup infrastructure(storeonce+ MSL) and even the data backuped on them be affected?

regsrd,

Ledvan.

Re: HPE storeonce Ransomware attacks

Cali — Mon, 19 Jun 2023 18:44:04 GMT

I have seen Ransomware attacks, where they formatted Tapes inside the Library.

So I would advise:

- Use Veeam 12 with Catalyst and the Immutable Feature for StoreOnce

- Activate Dual Authentication on StoreOnce

- Remove Tape from Libary after Backup

- Do not use AD login for Backup Server / Veeam / StoreOnce

There is a very useful Dokument, I can recommend:

HPE Reference Configuration for Veeam Backup & Replication version 12 with HPE StoreOnce and HPE StoreEver

Cali

Re: HPE storeonce Ransomware attacks

ledvan — Wed, 21 Jun 2023 09:26:09 GMT

Hi cali,

my main concern is about Storeonce, although its isolated from network but im still wondering if ransomeware hit the network and we have used COFC, would there be any risk for the data on catalyst?its not practical to use immutable backup for us due to capacity limit

regards,

Re: HPE storeonce Ransomware attacks

neutral — Wed, 21 Jun 2023 10:46:58 GMT

Hello @ledvan,

I found a related technical paper for your reference. Hope this might give you some insight: https://www.hpe.com/psnow/doc/a00042003enw

Thanks & Regards,

Ashik N S

Re: HPE storeonce Ransomware attacks

Sunitha_Mod — Wed, 28 Jun 2023 13:59:32 GMT

Hello Ledvan,

Let us know if you were able to resolve the issue.

If you have no further query and you are satisfied with the answer then kindly mark the topic as Solved so that it is helpful for all community members.