Veeam Cloud Connect’s Insider Protection: A Game-Changer for Data Security
Last month, Veeam released Update 3 for Backup & Replication 9.5, which included the much-anticipated Insider Protection feature. This feature allows VCSPs to enable deleted backup protection for specific tenants, providing an additional layer of data security for cloud-based backups in case of malicious user access or accidental deletion by an administrator. While this feature is a significant step forward in terms of data security, there are still some missing elements that VCSPs should be aware of.
One such element is the lack of metrics to track storage usage for tenants with Insider Protection enabled. This means that service providers cannot account for or charge for storage usage, which can lead to inaccuracies in billing and potential financial losses. To address this issue, I have developed a proof-of-concept (POC) PowerShell script that lists all Cloud Connect tenant accounts with Backup Protection enabled, calculates the amount of storage in their _RecycleBin folders, and returns these values along with storage costs as they pertain to the service provider and the tenant.
The POC script is a useful workaround for now, but it has some caveats that can be improved upon. For instance, the service provider storage costs are hardcoded by default, but there is a section commented out that will prompt for the two values if desired. This means that VCSPs can customize the script to fit their specific needs and requirements.
Despite these limitations, Insider Protection remains an essential feature for VCSPs offering Cloud Connect services. With the POC script as a temporary solution, service providers can begin to offer Insider Protection to their clients, knowing that this feature will evolve in future releases of Backup & Replication.
Insider Protection: A Game-Changer for Data Security
Insider Protection is a powerful feature that provides an additional layer of data security for cloud-based backups. By enabling deleted backup protection for specific tenants, VCSPs can prevent accidental deletion or malicious activity from compromising sensitive data. This feature is especially important for businesses that rely on cloud-based backups to protect their critical data.
With Insider Protection, VCSPs can offer their clients a higher level of data security, which can be a significant differentiator in a crowded marketplace. By providing this feature as part of their Cloud Connect service offering, service providers can demonstrate their commitment to protecting their clients’ data and maintaining confidentiality.
Future Developments and Improvements
While the current release of Insider Protection has some limitations, it is clear that this feature will continue to evolve in future releases of Backup & Replication. As Veeam continues to develop and improve this feature, VCSPs can expect to see additional enhancements that address the caveats mentioned earlier.
One potential improvement could be the integration of a native PowerShell command-let or API call for retrieving metrics related to storage usage. This would enable service providers to accurately track and bill for storage usage, ensuring that their clients are charged correctly and that financial losses are minimized.
Another possible enhancement could be the ability to customize the retention period for backed-up data. Currently, the retention period is fixed at 30 days, but some clients may require a longer or shorter retention period based on their specific needs. By providing this flexibility, VCSPs can offer more tailored solutions to their clients and improve overall customer satisfaction.
Conclusion
Insider Protection is a game-changer for data security in the cloud, and VCSPs should consider offering this feature as part of their Cloud Connect services. While there are some limitations and caveats associated with the current release, these can be addressed through future enhancements and improvements. By staying up-to-date with the latest developments in Insider Protection and cloud-based backup solutions, VCSPs can continue to provide cutting-edge data security solutions to their clients, maintaining their trust and confidence in the process.