Netbackup incorrectly assigning MediaIDs at first but corrects when deleted & re-scanned.
Netbackup v10.2.0.1 - We're importing & cataloging (P1/P2) 1000s of tapes and we've got a script that does inventory (vmupdate) when the tapes are loaded for multiple media agents. The MediaID generation rule are applied, for few random tapes it does not add the initials eg.: NS is not added for tape NS1234 but it is updated as 1234L6 (default inventory) which fails the import jobs as it cannot find the tape. The same tapes [updated as 1234L6] when deleted from console and re-scanned manually from console gets the correct barcode NS1234. It is random & intermittent (but happens atleast once in 2 days) so I was hoping to get more details from Logs when it happens. It will be good to know which logs are required apart from bptm on media agents and if there are any other robot/inventory specific logs with higher debug ? Thank you.
MS SQL VADP Application State Capture (ASC) Backups are Fully Recoverable in NetBackup 10.4
Starting with NetBackup 10.4, VMware VADP Microsoft SQL full backups can be configured for complete application restoration. Before this release, users had just copy-only full backups combined with differential and incremental transaction log backups to restore their MS SQL applications. Copy-only full backups perform ASC, but do not allow for complete application recoveries. Also, copy-only can’t recover the transaction logs on top of those style backups like the new style full backups can. Now users have the option to configure their VMware MS SQL data protection two different ways as shown in the policy and protection plan figures below: The new Microsoft Transact-SQL (T-SQL) full backups configured for full application recoveries. Subsequent differential backup benchmarks are reset so differential backups don’t grow to become the size of fulls The traditional copy-only full backups with incremental and transaction log backups in separate schedules NetBackup 10.4 and onward makes this is possible because MS-SQL full backups are now cataloged as assets in the NetBackup Web UI. Users can now select MS SQL recovery points in the Web UI from either type of backup displayed in the MS SQL assets as shown in the figure below.So, restores work the same way they always have, just with the option of T-SQL full recovery points. Incremental and transaction log backups continue to use the NetBackup client agent. There are a few important notes to consider when using the new fully recoverable MS SQL full backups: This new full backup takes advantage of the T-SQL snapshot feature that begins in MS SQL 2022 but does so in compliance with that snapshot feature’s limitations. Those limitations include that no earlier MS-SQL versions are allowed, or that more than sixty-four (64) databases are included in a snapshot. Microsoft will most likely increase the sixty-four-database limit in the future This new full backup is an “opt in” feature and not the default full. The traditional copy-only full method is offered with the option to use the T-SQL snapshot as an alternative. Neither the “Truncate logs” or “Enable T-SQL snapshots” option are enabled by default Selecting the T-SQL option in a VMware (VADP) policy automatically sets snapshot handling to “Stop the backup if any snapshots exist.” This is a Microsoft requirement to ensure that the database is not in a suspended or inoperable state during the backup All NetBackup servers involved in T-SQL full backups or restores must be at version 10.4 or higherNetBackup 10.4 Adds K8s Malware Scanning Support and New Malware Scanning Features
Previous versions of NetBackup offered great backup data malware scanning options. But version 10.4 adds a litany of great new malware scanning features you’ll want to have. Just upgrade and they’re yours today: Scanning of K8s unstructured namespace data at the file system level A new malware scanning job configuration validation tool. Pre-test job configurations with a test/dry run of the malware scanning job. A configuration validator screen lets you run a quick scan of a few files specified in the job to see if the configuration will work the way you want it to. VMWare single file restore (SFR) can now skip infected files, not just flag them Separate malware scan jobs now appear in Activity Monitor instead of being part of other jobs. This allows scan jobs to be managed separately with Activity Monitor controls Scan host failover. Teamed scan hosts can take over scanning jobs for each other if a scan job fails for any reason on the first host. A notification of failover is posted Additional fields are added in scan results and view details for those running security operations center (SOC) as a service (SOCaaS). SOC is a cloud-based subscription threat detection service. Host and policy-specific messages are added so it’s easier to identify which system(s) contain malware threats Past scanning results can now be deleted An automatic Ansible script for silent malware scanning configuration will be available on GitHub once the script is past Open Source Review Board (OSRB) approval.NetBackup 10.4 Standardizes Security Event Pushes to Common External Platforms Using the OCSF Schema
Standardizing on one digital disc format (the Phillips standard) for audio and then video was the key to building the great leap forward for the audio-video industry back in the 1980’s. It saved all the audio vendors an ongoing battle between disc formats, which would make massive headaches for recording artists and disc manufacturers. It also paved the way for digital video disc (DVD) technology that followed. NetBackup 10.4+ takes the same approach with pushing audit security message events to external products/platforms. Using the OCSF message schema/format, 10.4+ can update external security and monitoring products and platforms in one standardized format. The result is far fewer headaches and much better security and reporting compliance for your IT staff. The OCSF is a big deal for the following reasons: Broad security partner Integration potential: The OCSF project was initiated by a partnership between Splunk and AWS, which built on the ICD Schema developed at Symantec—now part of Broadcom There are now 15 additional members, including some of the biggest names in technology and cybersecurity: Cloudflare, CrowdStrike, DTEX, IBM Security, IronNet, JupiterOne, Okta, Palo Alto Networks, Rapid7, Salesforce, Securonix, Sumo Logic, Tanium, Trend Micro, and ZScaler OCSF allows customers to avoid vendor lock-in by using a widely supported format As a result, NetBackup 10.4+ users get the following benefits: Three log push format options, with one option only usable at a time: generic NetBackup, OCSF, and Microsoft Sentinel Advanced Security Information (ASIM) Simultaneous NetBackup and OCSF pull formats are also available, with one option only usable at a time Security solutions that utilize the OCSF schema produce data in a consistent format. At the same time they accurately capture the full meaning and relevance of audit security message event information OCSF helps security teams simplify the ingestion and exchange of data between security tools. This produces faster and more accurate threat detection and investigation Security vendors and other data producers adopt and extend the OCSF schema for their specific domains Make your event monitoring and maintenance a big win by upgrading to NetBackup 10.4+ today.
