Configuring Guest Indexing Data Scan

To enable the guest indexing data scan, do the following:

  1. From the main menu, select Malware Detection.
  2. In the File Detection tab, select the File system activity analysis check box. This option enables the scan for known suspicious files and extensions, multiple deleted files, and multiple extension changes. For more information, see the following sections:

Note

This functionality is enabled by default when you install or upgrade to Veeam Backup & Replication 12.3.

  1. Make sure that you enable guest file system indexing for the required backup job. For more information, see Specify Guest Processing Settings.

To scan guest indexing data for indicators of compromise, select the Indicators of compromise detection check box. For more information, see Indicators of Compromise.

Configuring Guest Indexing Data Scan 

To keep the list of suspicious files and extensions as well as indicators of compromise up to date, do the following:

  1. From the main menu, select Malware Detection.
  2. In the File Detection tab, select the Update malware definitions automatically check box.

Veeam Backup & Replication will communicate with the Veeam Update Server (vbr.butler.veeam.com) daily and download the latest version of the SuspiciousFiles.xml file. By default, this occurs once a day at 12:00 AM.

Note

If your backup server has limited internet access, you can manually update the SuspiciousFiles.xml file. For more information, see this Veeam KB article.

Page updated 11/29/2024

Page content applies to build 12.3.0.310