New backup infrastructure requirements

We have used Veeam Backup & Replication for years with our VMware environment. We recently have had our cyber insurance asking new questions (which are all good) and they are requiring us to have segregated, air-gapped, or immutable backups to get the best rates. We do not currently have that implemented in our environment. We also backup about 8 TB of “Critical” storage but also have about 20 TB of video archive that we are trying to figure out the best way to backup.

So with that in mind, this is my question.

What are my best options for backup in a segregated, air-gapped, or immutable way that is both affordable and has a short (8 hour) restore window for the “Critical” vm storage?

We currently backup to a number of aging NAS and DAS. Thanks!

Jeremy, I don’t have enough time to go into depth right now on this (and I’m learning and asking some of the same questions as you). But I can tell you some about our environment, and where we are also hopefully headed…

  • We also use Veeam for our VMware environment
  • We have an LTO 8 tape system
  • We backup to local storage on a server and then to tape
  • We copy backups to storage at remote campus locations
  • Critical VMs have shorter backup cycles, including replication to remote campus locations
  • We backup a NAS to a tape library (this is ‘file to tape’ in Veeam parlance)
  • I’m hoping I can start on a project to have an immutable Veeam repository soon

Based on what you mentioned, I think we’re doing what your insurance company asks for besides the immutable repository (but our tape strategy helps with that some too). All the credit for this goes to @jimmichael as he set it all up

Happy to chat or just go back and forth here and learn from each other

I’d also tell you that you that I think it’s best to think of your requirements in separate pieces (knowing that they may be the same thing, but you don’t want to by default link them), so for example that could include:

  • Immutable to protect from compromise
  • Short RTO for rapid recovery

Those two things might be served by the same thing, but linking/tying them to each other significantly changes the approach for your solutions

Hey Shawn. Thank for sharing! That is helpful. We’ve been tape free for a while but I think that may actually be the easier & cheaper option to meet these requirements. Would you mind sharing what you have for a tape system?