Ransomware attackers specifically target and attempt to destroy backup systems to increase the probability of payment. Hardening your system is critical. Please ensure you have reviewed your platform security using the Security Hardening Checklist
Cohesity

COHESITY Documentation

Explore our documentation to get started, discover products & new features, access troubleshooting guides, register sources, platforms support.

Products
Data Security Alliance
Visit Cohesity.com
Demos
Support
Blogs
Developers
Partner Portals
Cohesity Community
© 2026 Cohesity, Inc. All Rights Reserved.
Terms of Use|
Privacy Policy|
Legal|
  1. Home
  2. NetBackup™ Snapshot Manager for Cloud Install and Upgrade Guide
  3. Section I. NetBackup Snapshot Manager for Cloud installation and configuration
  4. Configuration for protecting assets on cloud hosts/VM
  5. Deciding which feature (on-host agent or agentless) of NetBackup Snapshot Manager is to be used for protecting the assets
NetBackup™ Snapshot Manager for Cloud Install and Upgrade Guide

Deciding which feature (on-host agent or agentless) of NetBackup Snapshot Manager is to be used for protecting the assets

For NetBackup to discover and protect assets on a host for single file restore or filesystem/application consistency, then install the agent on the host, even if snapshots are filesystem/application consistent through provider-managed consistency.

(For cloud hosts/VM being protected) By default, the filesystem consistent snapshots are only attempted with the provider-managed consistency that is supported by the cloud service provider. This is irrespective of whether the application state of any such asset is in the 'Connected' state or not. The onhost agent or agentless connection is necessary only when any application on the Cloud host or VM is configured.

(For Microsoft Azure cloud provider) To use Azure recovery points for the snapshots to be application consistent, refer to the following table to connect and configure the VM's in Azure cloud:

(For OCI) Block volumes created or attached while creating instances are not supported for consistent snapshots using the on-host or agentless connections.

Oracle PCA does not support agent installation and consistent snapshots.

For Windows

For Linux

No need to connect and configure the VM's

  • For Linux: By default the snapshots would be filesystem consistent in Azure.

  • For Oracle on Linux:

    • The VM must be in a connected state

      Or

    • Pre or post scripts for application consistency must be configured for the Linux VM as mentioned in the Application-consistent backup of Azure Linux VMs documentation.

The agent installs necessary plugins for performing the required operations for protecting the assets on the host.

One of the following approach can be used to install agents on their hosts that must be protected:

  • On-host agent

  • Agentless

In both the above approaches, the same plug-ins are installed on the host to perform the operations. However the difference in the above two approaches are as follows:

On-host agent

Agentless

User must manually install the agent on the host and register it to the Snapshot Manager host

The agent can be installed on the host using the NetBackup Web UI, by connecting/configuring the VM.

User must not share the Host credentials to the Snapshot Manager, as the user would install it manually on the host.

The Host/VM credentials must be stored in NetBackup credential manager, so that Snapshot Manager can connect to the host and install the agent and necessary plugins.

Connection is permanently setup over RabbitMQ port 5671 to the host VM from the Snapshot Manager to collect and send data.

Each time when an operation (as follows) must be performed on the host, then the Snapshot Manager temporarily connects to the VM using SSH port for Linux/Windows and installs the agent:

  • quiescing filesystems/applications for consistency

  • Single file restore

This then pushes the plugins to performs necessary operations and uninstall itself. The data is however transferred.

The agent once installed manually always remains on the host unless it is uninstalled, hence the name on-host agent feature.

As the agent is not always present on the host hence, the name agentless feature.

As connectivity is established once and remains until the agent is unregistered and uninstalled. This approach is faster compared to agentless feature while performing the operations on the host.

As connectivity has to be established each time an operation has to be performed on the host, and agents/plugins would have to be installed for each connection. This approach is time consuming in comparison to on-host agent feature.

Upgrades have to be manually performed on the on-host agent when NetBackup Snapshot Manager would be upgraded.

When NetBackup Snapshot Manager is upgraded the upgrades are automatically pushed to the host from NetBackup Snapshot Manager.

Note:

For NetBackup to discover and protect assets on a host for single file restore or filesystem/application consistency, then install the agent on the host, even if snapshots are filesystem/application consistent through provider-managed consistency.

More Information

Protecting assets with NetBackup Snapshot Manager's on-host agent feature

Protecting assets with NetBackup Snapshot Manager's agentless feature

Feedback

Was this page helpful?
Previous

Configuration for protecting assets on cloud hosts/VM

Next

Protecting assets with NetBackup Snapshot Manager's on-host agent feature

Feedback

Was this page helpful?