question

GayanSanjeewaPerera-4044 avatar image
0 Votes"
GayanSanjeewaPerera-4044 asked learn2skills commented

How to prevent ransomware for the DPM backup environment?

Hi Team,

I am using System Center Data Protection Manager. I want to secure my backup system for ransomware attacks.

What are options are available for that?

Currently used azure for off-loading.

Note:

Can we enable encryption for DPM disk backup?

Thanks,
Gayan.

windows-server-2019
· 2
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

If this answers your query, do click Accept Answer and Up-Vote for the same. And, if you have any further query do let us know.

0 Votes 0 ·

To follow-up, Please let us know if you have further query on this.
Please don’t forget to Accept the answer

0 Votes 0 ·
learn2skills avatar image
0 Votes"
learn2skills answered

Hi @GayanSanjeewaPerera-4044

Can we enable encryption for DPM disk backup?
No. Data Protection Manager (DPM) does not perform compression or encryption on disk of the data it protects. DPM stores data very efficiently by only storing the changed blocks between recovery points.

If you want encryption, then leverage a SAN that supports hardware encryption, a 3rd party hardware encryption product or if data is encrypted at the source, i.e. NTFS encryption, then the data would stay encrypted in the DPM replica.

Another option for compression and encryption is http://www.exar.com/data-compression/ which works with DPM replica volumes. You cannot use BitLocker with DPM volumes.
Refer- https://www.itprotoday.com/compute-engines/q-does-dpm-perform-encryptioncompression-data-it-stores

Please have a look at the following article regarding anti-virus on a DPM-server:
https://docs.microsoft.com/en-us/previous-versions/system-center/system-center-2012-R2/hh757911(v=sc.12)?redirectedfrom=MSDN

Configure firewall settings for DPM
https://docs.microsoft.com/en-us/previous-versions/system-center/system-center-2012-R2/hh757794(v=sc.12)?redirectedfrom=MSDN

It is already explained on your question, refer to the below url.
https://social.technet.microsoft.com/Forums/en-US/d7a7685f-45e0-47b2-9dad-ab4c996eb94c/best-practice-for-safeguarding-dpm-against-ransomware?forum=dpmdrbackup


If the Answer is helpful, please click Accept Answer and up-vote, this can be beneficial to other community members.


5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Jingruihan-MSFT avatar image
0 Votes"
Jingruihan-MSFT answered

Hi, everything working now?

5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.