Veeam backups failing. Bypass RTS fixes

Veeam B&R version 12.2.0.334 keeps failing unless I disable/override Real Time Scanning > Files.

We have put in place all relevant exception rules that I can find on the Sophos support portal but I find I'm still having issues caused by the RTS.

Managed Detection and Response FTS 2024.2.2.5.3-MR1

Server Core Agent FTS 2024.2.2.8.2-MR1

Server Intercept X FTS 2024.1.1.12.2-MR1

Lockdown 7.1.4.68 (Unlocked)



Added Tags
[edited by: GlennSen at 2:46 PM (GMT -7) on 3 Oct 2024]
Parents
  • We've been quiet for two weeks now and now the same problem occurs again. High RAM usage due to a Sophos process and backup jobs running on errors. Is there now a solution to the problem that lasts longer than weeks?

  • I have the same setup, but never experienced any disruption when Sophos got installed, with OR without exclusions. I'll be watching this thread, if you want to compare configuration with a working system, I'll see if I can accomodate.

    I'm seeing mixed issues in this thread:  PostgreSQL services stopping, Console not working, and backup 'running with errors'. ..interrelated (and to Sophos RTS) or individually standing incidents?

    You are disabling the real-time scanner altogether for Veeam to work correctly. What would happen if you leave it on, but temporarily exclude the entire areas where Veeam, the repo, and the databases are located? Just as a troubleshooting step?

    Also: has a newly built server. If this server is not yet in production, a reinstallation with MSSQL could also be a step to ascertain if the problem lies in the combination PostgreSQL/Sophos?

    If you want to compare notes with my working setup, ask away.

  • We never had any problems and never ruled out any paths. The problems only appeared with the last Veeam version. The RAM usage doesn't increase quickly either. Sometimes it takes a week, sometimes a day or two.

    When you use SSPservice.exe with 400MB of RAM, you notice that it becomes sluggish. From 500MB onwards there are crashes in Veeam.

    Sophos support is really trying hard to fix the problem. The uneven time it takes for the problem to occur just drags the whole thing out. I'm confident that Sophos will fix the problem.

    Is your server an Intel or an AMD?

  • The basic hardware:

    System Model:              ProLiant DL360 Gen10
    Processor(s):              1 Processor(s) Installed.
                               [01]: Intel64 Family 6 Model 85 Stepping 4 GenuineIntel ~2095 Mhz
    Total Physical Memory:     97.962 MB
    Available Physical Memory: 82.362 MB

    Perhaps a support ticket to Veeam will speed things up.

Reply
  • The basic hardware:

    System Model:              ProLiant DL360 Gen10
    Processor(s):              1 Processor(s) Installed.
                               [01]: Intel64 Family 6 Model 85 Stepping 4 GenuineIntel ~2095 Mhz
    Total Physical Memory:     97.962 MB
    Available Physical Memory: 82.362 MB

    Perhaps a support ticket to Veeam will speed things up.

Children
No Data