Backup Immutability

When creating a backup job and selecting Amazon S3 or Local Folder type of Backup Repository as your destination, NAKIVO Backup & Replication allows you to make the recovery points in these repositories immutable. With immutability enabled, the recovery points are stored using the write-once-read-many (WORM) model. Immutability adds an additional layer of security to backups by protecting recovery points from encryption by ransomware or accidental deletions/modifications.

For Amazon S3 type of Backup Repository, S3 Object Lock should be enabled for the bucket in Amazon S3. This type of immutability cannot be shortened or lifted, not even by the root user.

With Local Folder type of Backup Repository, immutable recovery points cannot be overwritten, deleted, or changed by anyone except the root user before the specified period expires.

When Local Folder type of Backup Repository is deployed as part of a VMware vSphere or Nutanix AHV virtual appliance, NAKIVO Backup & Replication provides an even higher level of anti-ransomware protection. You can make recovery points stored in this type of repository immutable, and the immutability cannot be lifted or changed by anyone, not even the root user.

You can find more details on how to enable immutability in the following articles:

• Backup Job Wizard for VMware: Retention

• Backup Job Wizard for VMware Cloud Director: Retention

• Backup Job Wizard for Hyper-V: Retention

• Backup Job Wizard for Nutanix AHV: Retention

• Backup Job Wizard for Physical Machine: Retention

• Backup Copy Job Wizard: Retention

• Deploying VMware Virtual Appliance

• Deploying Nutanix AHV Virtual Appliance

Make sure to check feature requirements for this feature here.