• New task type for agentless snapshot-based backups of all OLVM virtual machines regardless of their workload or operating system.

• SEP sesam Web UI now provides a more detailed overview of jobs and tasks, improved monitoring of the SEP sesam environment and the ability to perform various operations, e.g. running or locking backups, restarting failed jobs, etc.

• You can now use the case sensitive option to ensure that upper and lower case letters are treated equally when sorting the results. Also, with the new filter option, you can set a delay for reloading data when you change the filter(s).

• When creating a backup job on Linux, you can now set that deleted or changed files are not reported as errors.

• You can now simply start replication immediately under Activities -> Immediate Start -> Replication.

• Tape expiry of a tape provides a new option to erase all metadata, which deletes all metadata from the tape media and initialises the tape (when the tape is mounted in a drive), removing access to all existing data on the tape. DSGVO compliance and RTBF (Right to be forgotten) can thus be taken into account..

Backup Direct to Object Storage 

With SEP sesam Jaglion V2 and Si3 NG you can back up your data directly to S3 Cloud, Local S3 Object Storage, Microsoft Azure and Azure Blob Storage. Back up your data directly to Azure Blob Storage and restore the items you want directly from there. After an initial full backup of your virtual and physical environment, you can use any backup level (including differential and incremental backups) to back up only new data to Blob Storage.

Since S3 is an open API standard and AWS Simple Storage Service is an example of the implementation of the standard, SEP sesam Si3 NG can also be used with other S3-compatible cloud implementations. Configuring and managing Si3 NG in an S3-compatible cloud implementation is similar to Backup to S3 Cloud Storage and follows the same process and rules provided for using Si3 NG with S3. 

Restore Direct from Object Storage - Powerful recovery

The new Si3 NG can detect duplicate data fragments to optimise the restore process. Use the Web Restore Wizard or the GUI Restore Wizard to instantly restore your data. Restoring a single file is easy as you can use the search function to find the backup you want and start the restore process at the original or another location.

Si3 NG uses Azure Blob Storage in the same way as on-premises storage, so you can use your Azure Blob Storage to securely store and retrieve your business data anytime, anywhere.

Multiple media pools

With Si3 NG, you can create multiple media pools to ensure scalability and granularity of backup jobs. You can create separate media pools, e.g. for daily differential and incremental and weekly full backup jobs or for migration and replication, and you can set a different retention time for each media pool.
 

• Si3 NG offers excellent performance and support for multiple storage locations. Si3 NG supports any directly attached hard disk, provides global deduplication with source-side (Si3S) and target-side (Si3T) deduplication, replication and encryption, and enables Single File Restore (SFR) and Instant Recovery.

• For Microsoft Windows Server 2016 or higher, the Resilient Change Tracking (RCT) feature is supported to back up Hyper-V virtual machines. Similar to CBT for VMware and Citrix, the incremental backup technology RCT for Hyper-V detects changes at block level and only backs up the data that has changed since the last incremental backup. This allows VMs to be backed up more quickly and saves storage space at the same time.

• In addition to HPE StoreOnce Catalyst storage and HPE Cloud Bank storage, you can now use HPE Cloud Volumes as backup storage. The HPE Cloud Volumes solution provides efficient direct backup, replication and recovery.

• The SEP sesam REST API V2 has been extended to support a wide range of use cases. A large number of new endpoints have been added.

• SEP sesam now offers support for Linux sparse files to prevent running out of disk space during recovery.

• Si3-NG - the significantly optimised SEP deduplication combines the previous great added values with considerably improved and completely new functionalities.

• Global deduplication completely via backup, replication and client-side deduplication

• Very effective algorithm for best dedup rates

• Complete inline in-memory without post-processing

• Significantly increased performance in backup, restore and migration, which according to previous benchmarks is almost on a level with the performance of a native DataStore.

• Extension of the previous limits with regard to logical as well as physical data volumes.

• Improved scaling through optimised redesign of CPU usage via parallel threads

• "Direct-to-S3" without the diversions via local storage for cost- and performance-optimised operation in AWS or for using SDS storage

• Support for direct migration from Si3 to Si3-NG

• through optimised tape processing

• VFS (Sesam Virtual File System) performance improvements enable 100x faster access to vSphere VMs booted directly from the SEP sesam datastore.

• Support for PostgreSQL on Windows. The SEP sesam server can now optionally be installed based on PostgreSQL with improved performance and massively improved scalability.

SiS is a very effective protection against ransomware attacks, as backups are increasingly becoming one of the targets of attacks, so these ransomware attacks could delete, modify or encrypt the backups. 

SEP Immutable Storage, also called Si-Storage or SiS, prevents this!

SEP sesam Immutable Storage for directly attached Linux Filesystem Storage ensures that stored data remains completely static in its original and unaltered form throughout its lifetime. This means that organisations can quickly recover from a ransomware attack, even if they have lost access to their data and servers, by using stored data copies that have remained unchanged and intact to restore the entire operating environment.

With SiS, even with full admin access to the SEP sesam backup server, the attackers cannot delete the backup data or modify or encrypt it in any way. So it doesn't matter if the attacker has gained control of your backup servers, as you always have the uncompromised data and it can be used to restore your entire environment. SiS is based on the Si3 NG Deduplication Store, a special type of data store required for Si3 deduplication. Si3 NG is a new generation of Si3 data store that offers high performance for backup, restore and migration, as well as direct backup to S3. The new SiS functionality additionally offers built-in security features to maintain data integrity, such as a WORM (Write-Once-Read-Many) function, definable immutability (retention time to be set), audit logs, etc.

Based on the File Protection Service (FPS), which scans the file system and sets the Immutable Bit for all new objects, all data stored on SiS is marked as immutable at the time of storing and can no longer be changed. No object stored on SiS can be changed in any way: It cannot be renamed or removed, no links can be made to these objects, and its metadata cannot be accessed or changed. The objects with immutable attributes can only be displayed in read mode.

SiS is a storage location that can be written to once and read as often as necessary. This applies to all media pools connected to the SiS data store.

SiS Highlights at a glance

Resistant against ransomware attacks
Immutability ensures that the data is static, unchangeable and cannot be deleted. Attackers can therefore not change, encrypt or delete it, even if they have gained access to your backup environment.

Resistant to human error & malicious insider threats
No one from the inside, regardless of their role in the company and their user status, can intentionally or accidentally manipulate or delete the data.

Adherence to data security and compliance regulations
SiS can ensure that data is retained in accordance with industry and regulatory requirements by guaranteeing the immutability and authenticity of the data. The immutability guarantees the integrity of the data and its deletion after a certain period of time (retention time to be set).

Legal obligation to keep records
Ensures data authenticity in the event of litigation and the secure storage of sensitive information for a specified period of time.
 

• Si3 NG encryption for Si3 deduplication protects your data from unauthorised access and helps maintain compliance. Si3 NG encryption can be activated simply by specifying and confirming the encryption password. Without the password, the Si3 data store data can no longer be read.

• SEP sesam Jaglion has changed the authentication concept. Now only a user with superuser rights can configure authentication and assign authorisations (ACLs) to created users. The internal users can be authenticated via a signed certificate instead of a user password.

• With database-based authentication enabled, it is now possible to authenticate users via a signed certificate instead of a user password. Users from external authentication sources (LDAP/AD) cannot be authenticated with a certificate (only with a password).

• The separate roles enable separate management and backup data keeping.

• Account-based permissions for VMs, new MSP report

• Catalyst stores can be configured with a data immutability period via the StoreOnce console. During the specified time period, the backup application(s) accessing the store cannot delete backups whose retention period is shorter than this specified time period. This provides additional protection against malicious or accidental deletion of backup data when the roles of backup application administrator and StoreOnce system administrator are performed by different people.