A Guide to Veeam Setup Best Practices

More and more companies realize that server virtualization is the way to modern data security. In 2020, VMware is still the market leader, and many Veeam customers are using VMware vSphere as their preferred virtualization platform. But backing up virtual machines in vSphere is only part of the service availability. Backup is the backbone of recovery. So it’s important that backups are always available at the right speed.

This guide presents Veeam Backup & Replication best practices. It is not complete documentation or a detailed explanation of the features. The Best Practices Guide is for professionals looking for answers and suggestions on various topics. It may be a design idea, the best way to use a function, possible pitfalls, etc. D. As a rule, this information has been developed, collected, and updated by the Veeam Solutions Architects team working on site with Veeam users. They do not explain theory, but practice.

Note that the best practices are not the only available answer. In most cases it will work, but it may be completely wrong in other circumstances. Make sure you understand the recommended best practices, or ask someone to do so.

K.I.S.S. design

It becomes more difficult for the IT department to manage and ignore too complex projects, and it is easier for an intruder to use them and stay in the background. Projects that are easier and easier to ignore are usually safer. Use the K.I.S.S. (Keep it simple stupid) Principle for your creations. KISS is an acronym for “Keep it simple, stupid” as a design principle established by the US Navy in 1960. The principle of KISS states that most systems work best when they are simple and uncomplicated. Therefore, simplicity should be a key design objective and unnecessary complexity should be avoided. Simple design is easier to control and is generally safe.

Adding security to an existing infrastructure is much harder and more expensive than thinking about designing a new infrastructure or upgrading an existing one. In a virtual infrastructure, it makes sense to create a master image that has been enhanced from the beginning. Remove all known attack vectors and access only when Veeam components are added and certain (port) openings or additional software are required for correct operation. Thus, all versions are consistent and up-to-date, which makes them safe in the database.

Make sure that the repository servers are physically protected.

Place the repository servers in a restricted area, because these servers contain a 100% copy of your production environment! The repository servers must be physically secure and have appropriate access control systems. This will restrict access. All those who have access are logged and controlled at certain defined levels.

Use a standalone Windows server

If you are protecting the entire environment, you do not want the Veeam repository to be associated with the same Microsoft Active Directory domain that you are protecting through a backup. Otherwise, you may have a chicken and egg problem with accounts trying to authenticate to a domain that is no longer available if everything is lost.

If the domain administrator account is compromised, we do not want that account to be able to override the password for the backup store account so that the hacker can access the backup files as well as the entire environment.

Protect physical or external cloud servers with Veeam Agent’s backup.

  1. You may have servers that Veeam cannot back up or replicate.
  2. Maybe physical servers or a virtual machine that is in a public cloud that you do not have access to a hypervisor (e.g. AWS),
    Azure-blue). For these servers, you can back up the iland cloud repository using Veeam Agent.
  3. Backups. This agent is installed in the guest operating system of the production server and does not require access at hypervisor level. Veeam Agent can be installed on Windows and Linux systems.

Note the bandwidth availability.

  1. The performance of Veeam Cloud Connect is highly dependent on the available bandwidth. For example,
  2. If you are trying to back up or replicate terabytes of data, but only 20 Mbps is available, you can
  3. Backing up should take a few days. The initial backup or replica may be important time, because all data has to be transmitted for the first time.
  4. When you can’t finish Timely progressive work can have a significant impact on your safety and confidentiality.
  5. It is also better to schedule external tasks outside working hours if possible. This allows you to allocate Veeam bandwidth instead of sharing it with your network end users.

Check your backups and replicas regularly.

The worst time to find out if your backups or replicas are damaged is when you need them. Check yours.
Backups and copies for replication to ensure that they are complete and acceptable when and how you do it
you need them. You can use Veeam Console to restore all VMs, VM files or guest OS files to your computer.
Surroundings. This process gives you confidence that your data will be available immediately if
There is a disaster.

  1. You can test the failover at any time and access your replicas in the iland cloud.
  2. This is useful not only to test the integrity of your replica data, but also to provide access to and
  3. The function works as it should. It may be necessary to update the existing network rules.
    or that new critical servers have been added to production but not yet replicated.

Physical deployment


In small to medium sized environments (up to 500 virtual machines), Veeam Backup and Replication Server, Backup Repository and Backup Proxy components are typically running on the same physical server. This is also known as deployment of a “model device”.

In large environments (over 2500 virtual machines), Veeam’s backup and replication services work best on separate physical or virtual servers. When multiple jobs are running at the same time and consume large amounts of CPU and RAM, it may not be possible to scale up a virtual backup and replication server to meet system requirements.

One of the advantages of running Veeam Backup and Replication Server on a physical server is that it runs independently of the virtual platform. This may be an ideal situation where the virtualized platform is recovering from a disaster.

In an enterprise environment, you can install additional VBR to speed up the disaster recovery process. You can reuse existing availability components, such as a repository or proxy server, for Veeam Backup and Replication.

Backup Proxy

The Backup Proxy is a compact architectural component of Veeam that sits between the data source and the backup destination, processing backup jobs and providing backup traffic. Backup proxy server tasks include retrieving VM data from the production storage and compressing, deduplicating and sending this data to the backup repository. With more than one virtualized (or physical) backup proxy, you can easily scale your backup infrastructure to fit your system size.

  • In a simple deployment scenario for small environments, Veeam Backup Proxy is automatically installed on the VBR as part of the Veeam Backup and Replication installation.
  • In advanced deployments, the Proxy role is manually assigned to one or more Windows servers. This offloads the Veeam backup server, reducing backup time and improving performance.

How to Setup and Configure Veeam Backup & Replication

Veeam Backup & Replication is the only solution that easily, reliably and flexibly protects all your cloud, virtual and physical workloads. Get rid of privacy, extortion protection, and compliance issues. Veeam saves time and money, simplifies administration, and minimizes costly downtime with key features that allow you to fully manage your entire backup data lifecycle. Now you can confidently focus on your business goals.

What is Veeam Configuration Backup?

By default, Veeam Backup & Replication is configured to create a daily configuration backup. You can change the schedule or run the backup manually.

Run the setup wizard.

To run the setup wizard:

  1. Download the latest Veeam Backup & Replication installation image from the Veeam product download page.
  2. Deploy the install image on the computer where you want to install Veeam Backup & Replication, or burn the image file to a flash drive or other removable media. If you want to install Veeam Backup & Replication on a virtual machine, use the built-in virtualization management software tools to mount the installation image on a virtual machine.
  3. To extract ISO content, you can also use the latest versions of utilities that can properly extract data from large ISO files and process it properly with long file paths.
  4. After you install the image or install your hard drive, Autorun opens a welcome screen with installation options. If Autorun is unavailable or disabled, start the Setup.exe file from the image or from your hard drive.
  5. In the Veeam Backup & Replication Welcome section, click Install.

Install Veeam Backup & Replication

Install Veeam Backup & Replication on a Microsoft Windows physical or virtual machine.

To install Veeam Backup & Replication, follow these steps:

Download the latest Veeam Backup & Replication installation image from the Veeam product download page.
You need to be logged in to your Veeam account. If you don’t have an account, register using your work email address.

  1. Deploy the installation image on the computer where you want to install Veeam Backup & Replication, or write the image file to a flash drive or other removable media.
  2. If you want to install Veeam Backup & Replication on a virtual machine, use the built-in virtualization management software tools to mount the installation image on the virtual machine.
  3. Run Setup.exe in the image or on your hard drive to open the welcome screen.
  4. In the Veeam Backup & Replication Welcome section, click Install.
  5. Leave the default settings at the “Software Features” step of the wizard.
  6. Install all missing software components on the “Check System Configuration” step of the wizard.
  7. In the default configuration step of the wizard, click “Install” to start the installation.

Select the license file and program functions

The step “Grant a license” is not obligatory. You can simply continue to install Veeam Backup & Replication and it will run in Free Edition mode. The Wizard will let you know if you already have a license on your computer.

Click Browse to provide the license file, whether it’s a trial or a purchased version. Find the * .lic file in Explorer and click Next.
Then you can select the components you want to install in the “Program Features” screen.

Veeam Backup & Replication
Veeam Backup Catalogue
Veeam Backup & Replication console

If necessary, you can click the “Browse” button to change the installation folder. Leave all three options selected and click Next to go to the system configuration check screen.

Check for Missing Software

At this stage, the wizard will check the system to make sure that all the necessary software is installed. The wizard will continue when all the necessary components are available on your computer. Otherwise, the screen of missing components will be displayed.

Select Install to install the missing components. Once the Wizard has finished installing, you will see a status screen where you can click Next to proceed to the next step. If you do not want the Wizard to install the missing components for you, exit the installation, install these components, and then run the Wizard again.

How to install and configure Veeam Backup

Step 1: Enter the PhoenixNAP Veeam Availability Console (VAC).
Step 2 – Install Veeam Management Agent.
Step 3 – Configure the management agent connection.
Step 4 – Install the Veeam Backup Agent.
Step 5 – Configure the Veeam Backup Agent and start the backup job.

The steps described in this article helped you install and configure Veaam Management Agent and Veeam Backup Agent using Veeam Availability Console.

How to install Veeam Agent

To start installing the Veeam Backup agent:

  • Log in to the Veeam service provider console.
  • Veeam Service Provider Console section.
  • From the left menu, click Managed Computers.
  • Click the Found Computers tab.
  • Select the check boxes next to the computers you need.
  • Click Install a Backup Agent.
  • The “Install Backup Agent” window opens.
  • In the “Backup policy to use” list, select the backup policy to be applied during the installation process.
  • The selected backup policy is used to configure the backup task settings after Veeam Backup agents are installed. You can select “No policy” if you do not want to configure the backup task settings during the installation process.
  • To configure a new backup policy, click “Create” and configure a new backup policy.
  • By default, the read-only access mode is enabled for all Veeam backup agents. To disable read-only access for Veeam’s backup agents, set the Enable read-only access to the user interface for the Backup Agent to Disable.
  • Backup agents. In the Enable read-only access mode section.
    To pass global settings of Veeam Backup agents, click Configure and specify the default global settings of Veeam Backup agents.
  • Click Apply.
  • Wait until the installation process is complete.
  • The installation process may take a few minutes.

How to Change Veeam Cache Location

Veeam Agent for Microsoft Windows, managed by Veeam Backup & Replication, supports the creation of recovery points in the backup cache, a temporary local storage where Veeam Agent creates backup files if the remote backup storage is unavailable. This can be useful if you are creating Veeam Agent’s backups using a backup policy: if some computers in the backup policy cannot access the remote storage during a scheduled backup, Veeam Agent creates backup files in the backup cache on those computers. When the target storage becomes available, Veeam Agent uploads the backup files from the backup cache to the remote storage so that the backup chain contains a sequence of recovery points that exactly match the backup schedule.

In Veeam Agent’s management scenario, the backup cache works the same way as Veeam Agent, which works offline. For more information, see Veeam Agent. See the “Backup Cache” section in the Veeam Agent User Guide for Microsoft Windows.

In addition to the Backup Cache features and limitations listed in the Veeam Agent for Microsoft Windows User Guide, the following applies to Veeam Agent running in managed mode:

  • You can specify backup cache settings in the Backup Policy properties that target the following types of backup stores:
  • Veeam Backup Repository
  • Cloud Repository
    • To simplify setting up the backup cache on multiple Veeam Agent computers added to your backup policy, you can instruct
    • Veeam Agent to automatically select the location of the backup cache on each computer.

Select the location of the performance cache

During the wizard performance data caching phase, select the directory where the performance cache should be located.

The performance cache is the space on the hard drive where Veeam ONE stores performance data in real time when collecting this data. Performance cached data is used for Veeam ONE Monitor dashboards and views. A performance cache on the disk can significantly reduce the amount of RAM used on the computer where the Veeam ONE Server component is running.

By default, the performance cache is stored in folder C: \ PerfCache. To store the cache in another folder, click “Browse” next to the “Performance Cache” field and specify the path to the new folder.

Consider the following recommendations when choosing a location for your performance cache:

  • Make sure that the drive where the performance cache is located can quickly process read and write requests. Do not place the remote cache on networks with high latency values.
  • In large monitoring environments, place the performance cache on the local SSD on the computer running the Veeam ONE Server component. Usually one hard drive is enough for small and medium size video surveillance systems.
  • The length of the path to the performance cache folder cannot exceed the maximum Windows path limit.
  • Make sure you have enough space for the performance cache. The cache is cleared hourly when new data is collected. However, large amounts of disk space can be used in large surveillance environments. For example, in Advanced Scalability Mode, the cache can take up to 6 GB of storage per 1000 virtual machines during peak workloads.

Specify backup cache settings

The Cache Backup Wizard step is available if you have backup files stored in a remote location: a network shared folder, Veeam’s backup repository, Veeam Cloud Connect or Microsoft OneDrive.

Specifies the settings for the backup cache:

  • Select the Include backup cache checkbox.
  • In the Location field, enter the path to the folder on your computer where you want the backup files to be saved.
  • In the Maximum size field, enter the size of the backup cache.
  • When setting the backup cache size, assume the following:
    • Each full backup file may take up about 50% of the size of the backup data.
    • Each incremental backup file may take up about 10% of the size of the backup data.

You can use a dedicated removable storage device for the backup cache, for example. B. USB stick or SD card. In this case, the backup cache does not take up space on the local disk of the computer with Veeam Agent.

Determine the location and size of the cache

During the wizard caching phase, define the settings for the folder where the service files and global cache data are stored.

  • In the “Folder” field, enter the path to the folder where the service files (for source and target WAN Accelerators) and global cache data (for target WAN Accelerators) should be stored. When selecting a folder on the target WAN
  • Accelerator, make sure there is enough room to store global cache data.
  • In the Cache size field, specify the size of the global cache. The total cache size is specified for each original WAN Accelerator.
  • If you want to use a target WAN gas pedal with multiple original WAN gas pedals, each original WAN gas pedal will be allocated the specified space and the total cache size will increase proportionally.

Select the location of the local backup cache

The Cache Backup Wizard step is available if you have backup files stored in a remote location: a network share, Veeam Backup & Replication repository or cloud storage.

Specifies the settings for the backup cache:

  1. Select the Include backup cache check box.
  2. In the Location field, enter the path to the folder on the protected computer where you want the backup cache files to be stored.
  3. In the Maximum size field, enter the size of the backup cache.
    When setting the backup cache size, remember the following:

    1. Each full backup file can take up about 50% of the size of the backup data.
    2. Each incremental backup file may take about 10% of the size of the backup data.