HPE storeonce Ransomware attacks

[ledvan]

hi guys,

we are using veeam software to backup our data to storeonce then backuped again to a MSL tape library, i wanted to know is there any chance when the production environment was attacked by ransomware , could the backup infrastructure(storeonce+ MSL) and even the data backuped on them be affected?

regsrd,

Ledvan.

[Cali]

I have seen Ransomware attacks, where they formatted Tapes inside the Library.

So I would advise:

- Use Veeam 12 with Catalyst and the Immutable Feature for StoreOnce

- Activate Dual Authentication on StoreOnce

- Remove Tape from Libary after Backup

- Do not use AD login for Backup Server / Veeam / StoreOnce

There is a very useful Dokument, I can recommend:

HPE Reference Configuration for Veeam Backup & Replication version 12 with HPE StoreOnce and HPE StoreEver

Cali

[ledvan]

Hi cali,

my main concern is about Storeonce, although its isolated from network but im still wondering if ransomeware hit the network and we have used COFC, would there be any risk for the data on catalyst?its not practical to use immutable backup for us due to capacity limit

regards,

[neutral]

Hello @ledvan,

I found a related technical paper for your reference. Hope this might give you some insight: https://www.hpe.com/psnow/doc/a00042003enw 

Thanks & Regards,

Ashik N S

[Sunitha_Mod]

Hello Ledvan,

Let us know if you were able to resolve the issue.

If you have no further query and you are satisfied with the answer then kindly mark the topic as Solved so that it is helpful for all community members.