Best Practices

Configuring your server

Syncing with Internet Time

Ensure that both the Zmanda Pro Server and client devices are synchronized with internet time. This is critical as discrepancies beyond 10 minutes can result in a series of log messages indicating missed backups, which may be followed or preceded by successful backups. Devices that are not synchronized accurately may also encounter issues with certain cloud storage providers.

Configuring users

User Security Protocols

Users act as security boundaries. Devices logged into the same user account can access and restore data from one another. Assign devices to separate users when their data should remain isolated.

Password Management

It is advisable to enable the policy setting "Allow administrator to reset password" to remain "Always On". This enables the Zmanda Pro administrator to reset user-profile passwords as necessary, ensuring continued access to data.

Data Storage Management

Consider establishing separate Storage Vaults for individual devices, especially when there is no significant overlap in data between them. Smaller Storage Vaults are easier to manage, require less memory, and can perform maintenance tasks more quickly.

Configuring backups

Retention Policy Coordination

Make sure your retention policies are in sync with your backup schedules. For example, if retention policies are configured to keep backups made on Sundays, but backups are scheduled for Mondays, the intended backups will not be retained. Scheduling and retention must be closely aligned to ensure data preservation.

Backup Vaults

Allowing multiple, simultaneous backups into the same Vault can be beneficial due to the deduplication process. However, devices that shut down frequently, such as laptops, might encounter issues. Rare lock issues may occur if a device stops unexpectedly. Consider creating separate Vaults for frequently disrupted devices.

Client Installation Recommendations

For systems backing up from network shares, it may be more effective to install the client software directly onto the devices where the original data is stored. This ensures backups are performed on local paths, which generally enhances performance and reliability while leveraging file system snapshots.

Backup Types

In cases where there are challenges with the MS proprietary Windows Server System State backup, opt for the Disk Image backup type. This method is specifically designed to address and overcome such issues, offering broader functionality and scope for enhancements.

Ransomware protection​

Snapshot Management

Set policies that prevent end-users from deleting snapshots within Storage Vaults. This measure is crucial for maintaining integrity and historical data security.

Vault and Item Protections

Restrict end-users from editing or deleting Vaults and Protected Items. This step is essential to avoid unauthorized changes and potential data loss.

Storage Access Restrictions

Make sure that no user account has read/write access to any storage location across any device. This preventive measure is crucial for mitigating risks associated with ransomware.

Enhanced Object Locking

Zmanda Pro supports Object Lock on storage platforms like Wasabi and AWS S3. Ensure these settings are activated to automatically generate secure buckets if they don't exist, safeguarding against unauthorized changes.