But doing that makes it hard to do hourly back ups, and taking the them off line is tough with internal drives.
- my backup setup: Win10 Pro on an HP MicroServer (HP Gen8 Microserver [Entry Server with cheap Celeron Processor], 2x 8TB internal "stand alone" HDs for Macrium backups and 1x 6 TB internal Hard Disk for Backup of a Digital HD Recorder) -> "File-Server" - how backups will be performed: Macrium will create it´s backup directly to a share on that "File-Server". Read/Write access to the share only within Macrium and it´s stored credentials. No write access from other systems over the network to that share but "read" access is available to mount/restore backups. I hope that this internal Macrium mechanism is secure and that the credentials can´t be extracted by "bad programs". - additional steps/tools to enhance overall reliability: The tool "Syncovery" is configured to copy the backup-files from the 1st-8TB-HD to the 2nd-8TB-HD on a daily basis. "Hard Disk Sentinal" is used to monitor the HDs, Windows Defender is activated. -> Macrium, Syncovery and Hard Disk Sentinal will send E-Mails if any problems occur. - what to backup: 4 Family PCs, 2 of them provide backup data daily. 1 Digital-HD-Recorder (OS is Linux, full root access) that will be "backed up" manually by copying the newest files to the 6 TB Hard Disk (unregulary). The "File-Server" is only used to stores the backup-files. It is not used for other purpose. This may change. I am happy with this solution. I think It is easier to protect than systems that are used for many purposes. Kevin
Also same as i'm doing too. Those choosing internal drives backup storage however, i must say that I not seen or read much in the way of serious issues or even so much concern except how best to secure and isolate them from potential penetration via some file infector since they reside connected to mainframe system, something offline and disconnected methods avoid entirely. I dunno I say they are good to go as well so long as they are locked down but I would still keep some duplicates 100% isolated in some external environment in event of the worse which you can be sure most already make provision for anyway.
I am doing 4-weekly full, weekly differential, and nightly incremental backups to my NAS drive. I also do weekly incremental backups to a USB drive, which is then disconnected and stored away. I don't have the folder where the images are kept mounted but they are accessible using \\nas\backups. It is possible that Macrium's Image Guardian (like FIDES) won't be much help in protecting the files on my NAS. Once upon a time I experimented with using a dedicated user "Macrium" on the NAS which was the only user that could write to the folder where the images were kept. I could still read the folder and mount the images as read only. I stopped doing this about the time the scheduling issue occurred because I thought it was the cause. I wonder if I should do this again; would it prevent ransomware attacking the NAS? I do have plenty of other defenses (plus the off-line backups) but just feel like another layer would be good. BTW I am using v7.0 here. It is OK but doesn't feel as smooth as v6.0.
As many people do, I also use internal HDs for my primary image backups. But in view of the possibility of image backups being encrypted by malware I create secondary image backups in a partition that isn't in the MBR partition table. The partition doesn't have a drive letter as it is not present in Disk Management (or Diskpart).
I wonder if you guys sometimes just like the challenge of figuring out new programs and testing them to the max. I somehow doubt that Pete, Froggie or Brian will get caught out by ransomware and the protection is like insurance, in their cases never claimed on.
I would suggest to do it again-> using a dedicated user in Macriums "Network" options to write access the Macrium share on the NAS. Will cost you maybe 10 minutes of time but should be worth it. Kevin
Bingo and a half. Kevin, personally I feel a NAS server setup, is overly complex and an unnecessary. So my question for you,.. have you wrung out your setup by testing it against real Ransomware. I have tested my setup against a bunch of malware, and my setup protects the system, and yes Pumpernickel locks down the secondary drives.( It won't protect across a network) Pete
I posted another solution in the Macrium forums several months ago on how to protect against ransom ware. It's simple, effective & doesn't require complex computer skills to set up. I've done it this way for years & it has served me well. https://forum.macrium.com/FindPost12282.aspx
I also make my Macrium Backups to my Synology NAS server through the Network Settings in Macrium (so, no drive letters used!). After completion of the backup job, ResilioSync will automatically copy/sync the backup images to a second HDD in my PC where the backup folders are protected by RansomOff. In ResilioSync I used the read-only key for the backup sync to my second HDD. So, data can only be synced from the NAS to the HDD and in 'This PC', my NAS server is not visible (which I hope will be sufficient to keep it protected in case any ransomware hits my PC..
Hi, I haven´t tested against ramsonware. I hope keeping everthing up to date and usings Macriums "Network" options as well as restricting network share access will keep everthing safe and secure . I only connect to that system via remote desktop if manual application updates needs to be performed. Dedicated NAS/file server is used because of the amount of systems that needs to be backup´ed. Otherwise I would have implemented another solution .... and most likely internal HDs protected by Pumpernickel. BR Kevin
One thing I noticed is that Nick said they will be releasing a new feature of MR. So, I interpret this as a free addition!
Presuming it works well it sure would be to their benefit to have it as free and ideally having it work with V.6.
On June 30th, Nick Sills of Macrium said the following... FYI! "Macrium Image Guardian - MIG will be available in the next two weeks and will prevent unauthorized modifying of Macrium backup files on local and USB volumes."
If it's part and parcel of v7, it may not be backfitted to v6. With v7's only additional features at release time being CBT (Continuous Block Tracking) and viBOOT (no Continuous Incrementals as of yet), ANY additional feature for v7 at this time can only help its market. I'm not getting my hopes up, at this time, for v6 integration... but would be pleasantly surprised if it did appear there. BTW, they refer to MIG as a "new product" so it may just be some sort of standalone item... and maybe with a standalone price
regarding "Macrium Image Guardian": I do not see a big additional efford to make MIG "compatible" with both actual supported main versions of Macrium Reflect. Making it only available for V7 Users will leave a bad taste behind.
Look what I found that was posted in the Ten Forums and elsewhere... The next MR7 update will include Macrium Image Guardian: Protect Macrium backup files against #ransomwareattacks! https://blog.macrium.com/better-safe-than-sorry-ef32d8605830 1:39 AM - 3 Jul 2017
I take that as an indication that it will not be included in a Reflect v6 update. That doesn't surprise me for exactly the reason stated by Froggie above. Nor does it disappoint me in the least given other options such as those mentioned here. To the contrary, considering Macrium's recent sloppy update packaging, I'd just as soon they not add more device class filters and auto-start services to get misplaced and/or misloaded by the OS that I'm trying to protect with backups.
Arvy, I hear you. Too bad that HDD's can not have a write protect option like the Floppy Disks. I know I can use a USB 3 HDD only for images, but that is still much slower than an internal SATA HDD.
