Secure Restore

Veeam Backup & Replication allows you to perform secure restore — scan machine data with antivirus software before restoring the machine to the production environment.

During secure restore, Veeam Backup & Replication mounts disks of the machine that you plan to restore to the mount server. On the mount server, Veeam Backup & Replication triggers the antivirus software to scan files from the mounted disks. If during the scan the antivirus software detects malware, Veeam Backup & Replication will either abort the restore process, or restore the machine or its disks with restrictions depending on secure restore settings.

Secure restore is available for the following restore operations:

  • Instant Recovery
  • Entire VM Restore
  • Virtual Disks Restore
  • Restore to Microsoft Azure
  • Restore to Amazon EC2
  • Restore to Google Compute Engine
  • Disk Export
  • SureBackup

To perform secure restore, you must enable the Scan the restored machine for malware prior to performing the recovery option at the Secure Restore step of the restore wizard.



You can also scan machine data for malware regularly within a SureBackup job. For information on how to enable the malware scan for a SureBackup job, see the Settings step of the SureBackup job wizard.

Requirements and Limitations for Secure Restore

Before you perform secure restore, check the following prerequisites:

  • Veeam Backup & Replication does not perform malware scan for disks or volumes that cannot be mounted to the mount server.

For example, Storage Spaces disks or ReFS volumes (if ReFS is not supported by the mount server OS) are skipped from the scan and restored in a regular way.

Related Topics