Veeam backups failing. Bypass RTS fixes

Veeam B&R version 12.2.0.334 keeps failing unless I disable/override Real Time Scanning > Files.

We have put in place all relevant exception rules that I can find on the Sophos support portal but I find I'm still having issues caused by the RTS.

Managed Detection and Response FTS 2024.2.2.5.3-MR1

Server Core Agent FTS 2024.2.2.8.2-MR1

Server Intercept X FTS 2024.1.1.12.2-MR1

Lockdown 7.1.4.68 (Unlocked)



Added Tags
[edited by: GlennSen at 2:46 PM (GMT -7) on 3 Oct 2024]
Parents
  • We've been quiet for two weeks now and now the same problem occurs again. High RAM usage due to a Sophos process and backup jobs running on errors. Is there now a solution to the problem that lasts longer than weeks?

  • I have the same setup, but never experienced any disruption when Sophos got installed, with OR without exclusions. I'll be watching this thread, if you want to compare configuration with a working system, I'll see if I can accomodate.

    I'm seeing mixed issues in this thread:  PostgreSQL services stopping, Console not working, and backup 'running with errors'. ..interrelated (and to Sophos RTS) or individually standing incidents?

    You are disabling the real-time scanner altogether for Veeam to work correctly. What would happen if you leave it on, but temporarily exclude the entire areas where Veeam, the repo, and the databases are located? Just as a troubleshooting step?

    Also: has a newly built server. If this server is not yet in production, a reinstallation with MSSQL could also be a step to ascertain if the problem lies in the combination PostgreSQL/Sophos?

    If you want to compare notes with my working setup, ask away.

Reply
  • I have the same setup, but never experienced any disruption when Sophos got installed, with OR without exclusions. I'll be watching this thread, if you want to compare configuration with a working system, I'll see if I can accomodate.

    I'm seeing mixed issues in this thread:  PostgreSQL services stopping, Console not working, and backup 'running with errors'. ..interrelated (and to Sophos RTS) or individually standing incidents?

    You are disabling the real-time scanner altogether for Veeam to work correctly. What would happen if you leave it on, but temporarily exclude the entire areas where Veeam, the repo, and the databases are located? Just as a troubleshooting step?

    Also: has a newly built server. If this server is not yet in production, a reinstallation with MSSQL could also be a step to ascertain if the problem lies in the combination PostgreSQL/Sophos?

    If you want to compare notes with my working setup, ask away.

Children
No Data