Ransomware attackers specifically target and attempt to destroy backup systems to increase the probability of payment. Hardening your system is critical. Please ensure you have reviewed your platform security using the Security Hardening Checklist
Cohesity

COHESITY Documentation

Explore our documentation to get started, discover products & new features, access troubleshooting guides, register sources, platforms support.

Products
Data Security Alliance
Visit Cohesity.com
Demos
Support
Blogs
Developers
Partner Portals
Cohesity Community
© 2026 Cohesity, Inc. All Rights Reserved.
Terms of Use|
Privacy Policy|
Legal|
  1. Home
  3. Veritas NetBackup™ Cloud Administrator's Guide
  5. About the cloud storage
  7. About the Amazon S3 cloud storage API type
  9. About protecting data in Amazon for long-term retention
  11. About protecting data in Amazon Glacier
Veritas NetBackup™ Cloud Administrator's Guide

About protecting data in Amazon Glacier

To protect your data for long-term retention you can back up the data to Amazon (AWS) Glacier using NetBackup. Using NetBackup, you can create a storage server with GLACIER or GLACIER_DEEP_ARCHIVE storage class.

To configure a cloud storage server for Amazon GLACIER or DEEP ARCHIVE storage class

  1. Configure the Amazon GLACIER or GLACIER_DEEP_ARCHIVE cloud storage server.

    See Configuring a storage server for cloud storage.

  2. Create a disk pool using the Amazon bucket for GLACIER or GLACIER_DEEP_ARCHIVE storage.

  3. Create a backup policy.

    See Creating a backup policy.

    See the NetBackup Administrator's Guide, Volume I

Also ensure that you also have the required permissions. See Permissions required for Amazon S3 cloud provider user.

To duplicate tape data to Amazon Glacier

Use the bpduplicate command to duplicate tape data to Amazon Glacier storage.

Best practices

When you configure a storage server to transition data to Amazon Glacier, consider the following:

  • Ensure that GLACIER or GLACIER_DEEP_ARCHIVE is supported for the region to which the bucket belongs.

  • For restores, set the retrieval retention period to minimum 3 days.

  • Select True Image Recovery option wherever possible to reduce time and cost for image imports.

    To retrieve the data that is sent to Glacier, there is an inherent time delay of around 4 hours per fragment of the backup image. For phase 2 of image imports, this time delay is prevalent for images in the Glacier storage. However, if you enable True Image Recovery in the policy, the time delay for phase 2 imports reduces drastically from 4 hours to a few minutes per fragment. Phase 1 imports are faster, irrespective of whether True Image Recovery is enabled or not for the policy.

    See the NetBackup Administrator's Guide, Volume I to know more about supported workloads and file systems for True Image Recovery.

    See the NetBackup Administrator's Guide, Volume I to know more about the phases during image imports.

  • You can reduce restore time by parallel restores. For this operation, you use multistreaming to backup which creates multiple images at logical boundaries.

  • Workload Granular Recovery (GRT) or VMware Single File Restore (SFR), increases the time-out on the master, media, and client to more than 5 hours.

Limitations

Consider the following limitations:

  • NetBackup Accelerator feature is not supported for policies of the storage units that are created for GLACIER or GLACIER_DEEP_ARCHIVE. Do not select the Accelerator check box.

More Information

Configuring a disk pool for cloud storage

Feedback

Was this page helpful?
Previous

About protecting data in Amazon for long-term retention

Next

About restoring data from Amazon Glacier

Feedback

Was this page helpful?