Before any data reaches the target, the chosen restore point is mounted on the mount server and checked with Veeam Threat Hunter, antivirus software or YARA rules. Infected files therefore stay out of production.
Read more: Veeam Help Center
In the Ultra Transcenders books
Each book explains Secure Restore in context, with comparison tables and the common traps.
Terms in this definition
- Recovery point
Point-in-time copy of backed-up data. One exists only where a backup actually ran, and it counts once even if several retention tiers apply to it.
- mount server
Where backup content is mounted for Instant Recovery, Scan Backup, Secure Restore and file or application item restores. One tied to a repository also runs its rescans, health checks and synthetic operations, else the backup server does.
- YARA
A rule language for recognising malware by pattern. Veeam can apply such rules to restore points during Scan Backup, Secure Restore and SureBackup, flagging affected workloads as Infected.
Related terms
- Scan Backup
Searches restore points that already exist for signs of malware, with Veeam Threat Hunter, an antivirus product or YARA rules doing the work. It helps identify the most recent clean point or look through what a backup contains, and no data is written back, which is where it differs from Secure Restore.