Hello everyone. Welcome to our video.
We're going to be talking about leveraging immutability
with Veeam and HPE and I'm joined today by Chris Donohoe.
Chris, could you introduce yourself?
Tell us what you do and what we're gonna talk about?
Yeah, so I'm the HPE Alliance Global Solutions Architect at Veeam.
So I maintain relationships with the HPE product management
and Veeam product managers.
I act as a technical escalation point for HPE and Veeam solution.
And in my tenure at Veeam,
I've also been responsible for technical pre-sales enablement
and prior to that, I was a customer for 20 years.
So I grew up in the Datacenter.
Thank you.
So you already know what you're talking about.
And this is very important because guess what
ransomware is not going a way any time soon.
The frequency of attack is only increasing
and what you need is really a solution architecture
that is built for cyber resilience.
And that's really what I'd like for you, Chris to double click on
maybe take us through some of the key architectural components
that we should consider an position immutability in this context.
Yeah sure, so this illustration doesn't show an exhaustive list
of immutable options for Veeam customers,
but it should help you understand how backup data can be made
immutable at every layer of the 3 2 1 data protection architecture.
Customers can create immutable snapshots
with HPE Virtual Lock on the Alletra 9000.
They can send backups to a hard linux repository on an HPE storage server.
Immutable backup copies can be sent to HPE StoreOnce
and then another copy can be sent to a second StoreOnce offs site
or even to HPE Cloud Bank Storage.
This is a really good example of protecting data end to end
entirely with HPE hardware while still giving the customer
a full feature restore options at every layer as well.
So Chris recently,
Veeam introduced V12 of the Veeam data platform.
So could you walk us through some of the capabilities
that are today fully leveraged by HPE
and maybe highlight again the immutability
capabilities and features?
So Veeam and HPE offer customers
several immutability options, which I covered on
that previous illustration.
And one major update and version 12 of our software
would be the catalyst immutability on StoreOnce.
Catalyst immutability on HPE StoreOnce is managed by Veeam
with the immutability is enforced by the hardware.
So this means that once a backup has been marked immutable by Veeam,
it can't be deleted from the Veeam user interface.
And furthermore,
the only way to delete immutable backups
at all would be from the StoreOnce array itself.
And even then, the process requires the approval of two administrators,
one to initiate the process
and then a security officer to approve that deletion.
So once that immutability flag is set by the software,
it's not easy to remove any type of data off the hardware itself.
So in V12, there are a number of new capabilities around usability
which I think is absolutely essential, especially
as you think about the complexity of
preparing and combating ransomware.
Could you give us some key configuration details in V12?
Yeah, so the configuration process is straight forward
with only a few steps required on the array
and then the Veeam user interface.
First, this maximum ISV controlled data immutability retention setting,
it has to be higher than the Veeam immutability setting
that you intend to use in the backup job.
This allows Veeam to fully manage the immutability retention setting.
This needs to be enabled on the catalyst store
at the point of the catalyst store creation.
Second, the StoreOnce administrator needs to enable dual authorization on the array.
This will prompt the creation of a security officer login.
For critical operations like a catalyst store deletion
or changing time settings on the array,
the administrator can start that process
and the security officer will approve the action
before it actually takes effect.
In the Veeam backup and replication software,
the immutability period is set on the repository
just like any other immutable repository in Veeam.
And you can see just how easy this is,
check the box
and set the immutability period in the number of days.
Customers who are familiar with configuring Veeam backup jobs
today, will see that the process is really unchanged
when configuring backups to an immutable repository
and Veeam backup and replication V12,
the screenshots you see are exactly the same
regardless of the repository chosen.
So, the simplicity of configuring backup jobs is preserved
even when there are immutability settings on the backup repository.
When viewing immutable restore points,
the immutability period is clearly marked in the Veeam user interface.
And again, this cannot be changed or removed,
once the job runs.
The restore point will remain immutable
until the retention period expires on the StoreOnce array.
If anyone does try to delete the backup from the Veem UI,
they will clearly see this is not allowed.
Again, there is a process to delete the catalyst store
on the StoreOnce array,
but there's no way to do this from the Veeam user interface.
Well, thank you, Chris.
I think it's very obvious that the integration, the technology level
and the usability are both in place for
IT professionals to easily benefit from immutability
and really protect the protector,
protect the backups
so that they are never deleted or erased by cyber criminals.
Let's talk about scalability.
Everything's fun and games until you add scale to it, right?
Can you walk us through how
the combined solutions allow you to scale from small to big?
Sure, so the StoreOnce model you choose is really dependent
upon the amount of backup data storage you require.
Veems supports this catalyst immutability feature
across the entire StoreOnce portfolio ranging
from the very small StoreOnce VSA
all the way to a very large StoreOnce 5660.
For customers utilizing HPE cloud bank storage,
these arrays can store up to several petabytes of backup data
and you can see the performance increase
for the data throughput for every model upgrade as well.
There are other performance enhancements that HPE has made
to these latest StoreOnce models which also expand
the features that the customers can use
and the scalability and restore functionality
across the StoreOnce portfolio.
Well, we've covered a lot of ground today.
So clearly immutability is key
with these solutions created
by Veeam and HPE, you can deploy a very resilient infrastructure
in your environment.
Again, cybercriminals are not going to stop their attacks
and it's very key that you protect your backups,
protect your ability to recover,
should anything come up?
Thank you everybody for joining us and for more details,
you can check out the Veeam and HPE
content hub where you will find many more resources.
Thank you again for your time and thank you, Chris.
Thank you.