How not to copy encrypted files?

P

Pavel Semenchukov2020-02-25 09:47:40

Backup

Pavel Semenchukov, 2020-02-25 09:47:40

I'm sorry, I'm new to this.

1. There is a QNAP NAS that performs real-time replication (RTRR) on a schedule (15 minutes a day, the rest of the time is off).
2. There is a folder on the server where the sql backup and a copy of the network balls are placed according to the schedule.

How to avoid the situation when the backup files on the server are encrypted, and on the NAS, respectively, too?

What software can be used? Or it is possible to manage powershell? Or just connect the NAS as a network share and copy new backups there, without using replication?

Reply

Answer the question

In order to leave comments, you need to log in

5 answer(s)

K

Karpion, 2020-02-25
@Karpion

a1) Excuse me, but who is going to encrypt the files? Are you yourself or the virus?
a2) There are many remedies against the virus. For example, you can prevent it from accessing by using file permissions. Or you can hold the file by opening it in read-only mode - then it cannot be opened for writing (but in Unix - it can be deleted after an encrypted copy is made).
a3) It is preferable to use an operating system for which there are no viruses. For example FreeBSD.
b) As already mentioned here - you need to store several backups; but not only incremental, but somewhat complete. For each backup - check its health AFTER it is copied to a safe place.
c) A normal backup is done differently. Not the SQL server itself makes a backup in the form of a file, but the backup server makes a copy for itself using SQL. Although subtleties are possible here.

M

Mikhail Lyalin, 2020-02-25
@mr_jok

start backup from NAS
NAS as a network ball = viruses, etc. will definitely hit

V

vreitech, 2020-02-25
@fzfx

Check backup files before copying to the server to see if they are encrypted or not.

A

Armenian Radio, 2020-02-25
@gbg

Backup should be done historical - say, every 2 weeks - a full backup, the rest - differential, and so on for a period of six months.

C

CityCat4, 2020-02-25
@CityCat4

How to avoid the situation when the backup files on the server are encrypted, and on the NAS, respectively, too?

- never mount shelves with backups as network balls. The virus will definitely get there.
- use the "grandfather-father-son" technique
- start copying from the shelf. This will at least cut off file encryption on the shelf itself
- check files before copying. Of course, you can't check all ransomware, but a normal file is exactly what it looks like!