| Concern | Reason | Recommended Remediation |
|---|---|---|
| Outdated Veeam Backup & Replication Version | Current version is 12.3.1.1139, latest is 12.3.2.3617. Running an outdated version may expose the environment to security vulnerabilities and missing features. | Upgrade to the latest version 12.3.2.3617. See https://www.veeam.com/kb4696 for release notes and upgrade instructions. |
| Backup encryption password length and complexity recommendations should be followed | Best practice not implemented: To minimize the possibility of unauthorized access, passwords should meet Veeam recommendations for length and complexity. | Review and implement: To minimize the possibility of unauthorized access, passwords should meet Veeam recommendations for length and complexity. |
| Local Security Authority Server Service (LSASS) should be set to run as a protected process | Best practice not implemented: The protection for the Local Security Authority (LSA) process should be configured to prevent code injection attacks. | Review and implement: The protection for the Local Security Authority (LSA) process should be configured to prevent code injection attacks. |