Ransomware attackers specifically target and attempt to destroy backup systems to increase the probability of payment. Hardening your system is critical. Please ensure you have reviewed your platform security using the Security Hardening Checklist
Cohesity

COHESITY Documentation

Explore our documentation to get started, discover products & new features, access troubleshooting guides, register sources, platforms support.

Products
Data Security Alliance
Visit Cohesity.com
Demos
Support
Blogs
Developers
Partner Portals
Cohesity Community
© 2026 Cohesity, Inc. All Rights Reserved.
Terms of Use|
Privacy Policy|
Legal|
  1. Home
  3. Veritas NetBackup™ Cloud Administrator's Guide
  5. About the cloud storage
  7. About the Amazon S3 cloud storage API type
  9. About protecting data in Amazon for long-term retention
  11. About protecting data in Amazon Glacier
Veritas NetBackup™ Cloud Administrator's Guide

About protecting data in Amazon Glacier

To protect your data for long-term retention you can back up the data to Amazon (AWS) Glacier using NetBackup. Using NetBackup, you can create a storage server with Glacier storage class.

During the backup process, NetBackup internally uses the Amazon's zero-day lifecycle policy to transition data to Glacier. AWS lifecycle policy is a lifecycle rule defined to transition objects to the Glacier storage class in 0 (zero) days after creation. The following diagram illustrates the configuration process:

Figure: Protecting data in Amazon Glacier

Protecting data in Amazon Glacier

To configure a cloud storage server for Amazon GLACIER or DEEP ARCHIVE storage class

  1. Configure the Amazon GLACIER cloud storage server.

    See Configuring a storage server for cloud storage.

  2. Create a disk pool using the Amazon bucket for GLACIER storage.

  3. Create a backup policy.

    See Creating a backup policy.

    See the NetBackup Administrator's Guide, Volume I

Best practices

When you configure a storage server to transition data to Amazon Glacier, consider the following:

  • Ensure that Amazon Glacier is supported for the region to which the bucket belongs.

  • Ensure that the selected bucket does not have any existing Amazon lifecycle policy.

  • For restores, set the retrieval retention period to minimum 3 days.

  • Select True Image Recovery option wherever possible to reduce time and cost for image imports.

    To retrieve the data that is sent to Glacier, there is an inherent time delay of around 4 hours per fragment of the backup image. For phase 2 of image imports, this time delay is prevalent for images in the Glacier storage. However, if you enable True Image Recovery in the policy, the time delay for phase 2 imports reduces drastically from 4 hours to a few minutes per fragment. Phase 1 imports are faster, irrespective of whether True Image Recovery is enabled or not for the policy.

    See the NetBackup Administrator's Guide, Volume I to know more about supported workloads and file systems for True Image Recovery.

    See the NetBackup Administrator's Guide, Volume I to know more about the phases during image imports.

  • You can reduce restore time by parallel restores. For this operation, you use multistreaming to backup which creates multiple images at logical boundaries.

  • Workload Granular Recovery (GRT) or VMware Single File Restore (SFR), increases the time-out on the master, media, and client to more than 5 hours.

Limitations

Consider the following limitations:

  • NetBackup Accelerator feature is not supported for policies of the storage units that are created for Amazon Glacier. Do not select the Accelerator check box.

Permissions

Note:

This section does not apply to CloudCatalyst, only non-CloudCatalyst storage servers.

You must have the following permissions:

Note:

The bucket owner has these permissions, by default. The bucket owner can grant these permissions to others by writing an access policy.

  • Also ensure that you also have the required IAM USER permissions.

More Information

Configuring a disk pool for cloud storage

Feedback

Was this page helpful?
Previous

About protecting data in Amazon for long-term retention

Next

About backing up data to Amazon Glacier

Feedback

Was this page helpful?