NetBackup and Veritas Appliances Hardening Guide

Implementing an immutable data vault

One of the best ways to safeguard your data is to implement immutable and indelible storage. This type of storage ensures that data cannot be changed, encrypted, or deleted for a determined length of time (or at all). Veritas appliances and NetBackup provide secure and tamper-resistant immutable and indelible storage to protect data backups from being tampered with and from unauthorized access.

Veritas also offers the ability to store immutable data in the cloud on object storage, including Veritas Alta Recovery Vault or with third-party OpenStorage Technology (OST) vendors. Veritas Alta Recovery Vault also creates a separation of duties where Veritas manages the administration of the storage and provides you another layer of isolation from attack.

These features are vital to an effective and a rapid recovery strategy.

With the addition of immutability, Veritas now recommends a new strategy for backups. In the past, the recommendation was a 3-2-1 strategy: three copies of data, two on site on different media, and one copy off site. The current rise in cyber threats calls for an extra "1," creating a 3-2-1+1 strategy: three copies of data, two on site on different media, one copy off site, and one copy that is immutable.

This feature is not currently available for NetBackup Appliance.