Veritas NetBackup

Veritas NetBackup is an enterprise backup solution offering data management, automation, artificial intelligence, and elastic architecture.

Use Cases the Adapter Solves

• Backup Infrastructure Visibility: Gain complete visibility into your backup infrastructure by discovering all hosts and devices managed by NetBackup, ensuring comprehensive asset inventory for compliance and security audits.
• Backup Policy Compliance: Track which devices have backup policies configured and monitor backup schedules to ensure critical assets are properly protected according to organizational requirements.

Types of Assets Fetched

This adapter fetches the following types of assets:

• Devices

Data Retrieved through the Adapter

Devices - Fields such as Host Name, CPU Architecture, Operating System, NetBackup Version

Before You Begin

Required Ports

• TCP port 1556 (HTTPS) - Default NetBackup API port
• TCP port 443 (HTTPS) - Alternative HTTPS port

Authentication Methods

Username and Password Authentication with Domain Type Selection

The Veritas NetBackup adapter supports multiple authentication domain types to accommodate different NetBackup server configurations. You can authenticate using Veritas (vx), Windows NT (nt), Unix Password (unixpwd), or LDAP (ldap) domains.

Axonius uses the NetBackup API.

1. For authentication Axonius uses NetBackup API - 8.1.2 Authentication.
2. To fetch users Axonius uses the NetBackup API - 8.1.2 GET /config/hosts.

APIs

Axonius uses the Veritas NetBackup API version 8.1.2. The following endpoints are called:

• POST /netbackup/login - Authenticate and obtain JWT token
• GET /netbackup/config/hosts - Retrieve list of hosts managed by NetBackup
• GET /netbackup/config/policies - Retrieve backup policies
• GET /netbackup/config/policies/{policy_name} - Retrieve detailed policy information (when advanced setting enabled)

Required Permissions

The NetBackup user account must have the following permissions:

Security Administrator Role (Recommended)

The user account must be configured as a Security Administrator in NetBackup with the following privileges:

• View Assets permission to read host configuration data
• Access to NetBackup API endpoints for configuration retrieval

📘

Note: To create a user for NetBackup API access, administrators can use the bpnbat -AddUser command to create a VxSS user and bpnbaz command to grant administrator privileges. For detailed instructions, see the Veritas NetBackup documentation on adding API users.

Supported From Version

Supported from Axonius version 6.1

Connecting the Adapter in Axonius

Navigate to the Adapters page, search for [adapter name], and click on the adapter tile. Click Add Connection.

To connect the adapter in Axonius, provide the following parameters:

Required Parameters

1. URL for NetBackup Appliance - The base URL for the NetBackup API, including protocol and port. Example: https://masterservername.company.com:1556 (previously Host Name or IP Address field)

2. User Name - The username for the NetBackup user account with Security Administrator permissions.

3. Password - The password for the NetBackup user account.

Optional Parameters

1. Authentication Domain - The domain name used for authentication. This field specifies which authentication domain the user belongs to within the NetBackup environment. Required when using NT, LDAP, or custom Veritas domains.

2. Domain Type - Select the authentication domain type used by your NetBackup server:

   • Veritas (vx) - Default Veritas NetBackup authentication
   • Windows NT (nt) - Windows NT domain authentication
   • Unix Password (unixpwd) - Unix password authentication
   • LDAP (ldap) - LDAP directory authentication

3. Verify SSL - Select whether to verify the SSL certificate of the server against the CA database inside of Axonius. For more details, see SSL Trust & CA Settings.

4. HTTPS Proxy (optional) - Connect the adapter to a proxy instead of directly connecting it to the domain.

5. HTTPS Proxy User Name (optional) - The user name to use when connecting to the value supplied in Host Name or IP Address via the value supplied in HTTPS Proxy.

6. HTTPS Proxy Password (optional) - The password to use when connecting to the server using the HTTPS Proxy.

To learn more about common adapter connection parameters and buttons, see Adding a New Adapter Connection.

Advanced Settings

📘

Note: Advanced settings can either apply to all connections for this adapter, or to a specific connection. Refer to Advanced Configuration for Adapters. To learn more about Adapter Configuration tab advanced settings, see Adapter Advanced Settings.

Policy Details Collection

Policy Details (Default: Disabled) - When enabled, the adapter retrieves detailed information about each backup policy, including schedules, backup types, exclude dates, and storage configurations. This provides comprehensive policy data but may increase collection time for environments with many policies.