When you reference the Veeam Hardened Repository ISO, you'll note that the word "hardened" is in there. What makes the VHR "hardened"? I've touched on this before, but Veeam makes use of STIG's to harden the OS to the DISA recommendations. One of those functions used to harden the OS is USBGuard. And what is USBGuard? It's a service used to define a list of authorized USB devices that can connect to a machine. In…
Let's have a quick conversation about a few things you can do -- but probably shouldn't. Eat gas station sushi Leave important tasks for the last minute Believe everything on the internet Date a coworker Get a tattoo of the name of a significant other - at least early in the relationship - especially it it's that coworker Run security-focused VM's like a Veeam Hardened Repository on a NAS Wait, what? Okay, so I've always…
In part one we gave some background of the Veeam VHR history and it's transition from utilizing Ubuntu Linux Server LTS to Rocky Linux, as well as the hardware that we'll be utilizing to support our VHR, and then deployed the VHR ISO to our PowerEdge server. Part two of this series consisted of deploying the VHR ISO to our server. Now in our third and final part, we're going to add the new VHR…
In part one of this three part series, we gave some background of the Veeam VHR history and it's transition from utilizing Ubuntu Linux Server LTS to Rocky Linux, as well as the hardware that we'll be utilizing to support our VHR. And as a reminder, while the VHR does have support, it's currently classified under Veeam's Experimental Support Statement. Downloading and Deploying the VHR ISO The first step of course is to download the…
The History of the Veeam Hardened Repository ISO If you've been in the Veeam game within the past two years, you're probably aware that the Product Development team has been working hard on a turn-key solution that can be used to deploy a Veeam Hardened Repository (VHR) from an ISO. Historically if you wanted to utilize a VHR, you had to deploy a linux server and setup a repository backed by the XFS filesystem to…