How to prevent ransomware for the DPM backup environment?

Question

Hi Team,

I am using System Center Data Protection Manager. I want to secure my backup system for ransomware attacks.

What are options are available for that?

Currently used azure for off-loading.

Note:

Can we enable encryption for DPM disk backup?

Thanks,
Gayan.

Answer 1

Hi @R.A.Gayan Sanjeewa Perera

Can we enable encryption for DPM disk backup?
No. Data Protection Manager (DPM) does not perform compression or encryption on disk of the data it protects. DPM stores data very efficiently by only storing the changed blocks between recovery points.

If you want encryption, then leverage a SAN that supports hardware encryption, a 3rd party hardware encryption product or if data is encrypted at the source, i.e. NTFS encryption, then the data would stay encrypted in the DPM replica.

Another option for compression and encryption is http://www.exar.com/data-compression/ which works with DPM replica volumes. You cannot use BitLocker with DPM volumes.
Refer- https://www.itprotoday.com/compute-engines/q-does-dpm-perform-encryptioncompression-data-it-stores

Please have a look at the following article regarding anti-virus on a DPM-server:
https://learn.microsoft.com/en-us/previous-versions/system-center/system-center-2012-R2/hh757911(v=sc.12)?redirectedfrom=MSDN

Configure firewall settings for DPM
https://learn.microsoft.com/en-us/previous-versions/system-center/system-center-2012-R2/hh757794(v=sc.12)?redirectedfrom=MSDN

It is already explained on your question, refer to the below url.
https://social.technet.microsoft.com/Forums/en-US/d7a7685f-45e0-47b2-9dad-ab4c996eb94c/best-practice-for-safeguarding-dpm-against-ransomware?forum=dpmdrbackup

If the Answer is helpful, please click Accept Answer and up-vote, this can be beneficial to other community members.

Answer 2

Hi, everything working now?