Introduction


This article will take you through the steps for initial setup of using our cloud connect platform. As well best practice recommendations and general suggestions.


Best Practices


Repositories and Backup Strategy

We recommend having a backup job to a local repository and then a backup copy job to cloud connect. This helps towards meeting a 3-2-1 backup strategy. A Backup > Backup Copy job works better than just having two backups one to local and one to cloud. It puts a lot less load on the production environment as the backup copy job reads only from the local repository not the backed up server.


For local windows repositories ideally they should be formatted as ReFS. This allows Veeam to use "Fast Clone" which speeds up synthetic operations such as merges 


Encryption

We recommend that all backups are encrypted with a strong password. To enable encryption this will appear in the job creation wizard.


Configuration Backup

By default Veeam takes a backup of it's own configuration to your default repository. We highly recommend this option is left on. If the Veeam server is lost this backup will make recovery a lot quicker.


Insider Protection.

Vitanium can enable Insider Protection on your Cloud Connect tenant, this helps prevent loss of data from accidental or malicious deletion, Deleted backup files will be stored in a recycle bin area for 7 days where they can easily be restored. The recycle bin will no count towards your quota consumption.


For this to work the backup must have a GFS retention policy see: https://support.vitanium.com/support/solutions/articles/13000096672-gfs-retention-vs-short-term-retention-policy


Scheduling.


You can set a schedule to meet your RPO objectives, does the workload need to be backed once a day? every hour?


You can also schedule when the backup is allowed transfer data. You can stop this from running during work hours if concerned about bandwidth. When data transferred is allowed again the backup will pick up from where it left off. You can also throttle network traffic instead of completely turning off during peak hours. 


Securing the Veeam installation.


Access to the console should be protected to avoid unwanted access to backups. For that reason we suggest enabling 2fa on access to the console: https://helpcenter.veeam.com/archive/backup/120/vsphere/mfa.html



Prerequisites


1) An installation of Veeam Backup and Replication

2) A trial or paid Vitanium Cloud Connect account


Initial Setup


Once you have signed up for an account you will receive an e-mail from our sales team containing your cloud connect credentials. Please follow the below steps to add into your Veeam installation:


1) Open Veeam Backup And Replication and go to Backup Infrastructure. There will be a tab for service providers, once selected the option to add service provider will appear as below:



2) Fill in the Service Provider details as below



3) On the credentials page select add next to the drop down and enter the credentials from your e-mail


4) Press ok and apply. You will see a summary and confirmation of success 


Creating A Backup Copy Job


The recommended utilization of cloud connect is to create a backup job to the local repository, then create a copy job to our cloud connect repo. This will tie in nicely with 3-2-1 backup strategy explained here: https://vitanium.com/best-backup-practices-the-3-2-1-backup-strategy/


 

1) To create a backup copy job to our cloud connect repository, in Veeam Backup and Replication under the home tab and auxiliary jobs go to backup copy. You will then be asked to confirm name of job and copy mode, explained below:



2) Select the job for the backup copy



3) On the next screen select the cloud connect repository. You can also edit the retention policy from here. The options are explained in a separate article found here: 


4) On the next screen you can choose the data transfer mode, either direct or through a WAN accelerator. This must be deployed on the source as well as the target site. This will help with bandwidth savings. The target WAN should be pre populated with Service Provider's (Vitanium) Wan Accelerator  


5) you can then select a schedule for your Backup Copy Job as well as allowing data transfer during certain hours only. You will then be taken to the summary and completion screen