Ransomware attackers specifically target and attempt to destroy backup systems to increase the probability of payment. Hardening your system is critical. Please ensure you have reviewed your platform security using the Security Hardening Checklist
Cohesity

COHESITY Documentation

Explore our documentation to get started, discover products & new features, access troubleshooting guides, register sources, platforms support.

Products
Data Security Alliance
Visit Cohesity.com
Demos
Support
Blogs
Developers
Partner Portals
Cohesity Community
© 2026 Cohesity, Inc. All Rights Reserved.
Terms of Use|
Privacy Policy|
Legal|
  1. Home
  3. NetBackup™ Web UI Cloud Administrator's Guide
  5. Protecting PaaS assets
  7. Limitation and considerations
  9. For all databases
NetBackup™ Web UI Cloud Administrator's Guide

For all databases

  • NetBackup Snapshot Manager deployment in RHEL 7.x is not supported for PaaS assets protection.

  • NetBackup deployments in Flex Appliance and Flex Scale do not support PaaS workloads.

  • Backup and restore are not supported for the databases, which makes it mandatory to use client certificates for their connection to NetBackup.

  • Except for the AWS RDS workload instances, all other workload instances support only default ports; any custom ports are not supported.

  • Database names containing the characters '#' and '/' are not supported for backup and restore operations. Also, the database name should adhere to the naming conventions suggested by the cloud vendors.

  • ";" is not supported in server or database passwords.

  • Backup and restore of a database with non-7-bit ASCII characters are not supported for a primary server running Windows or having a media server version prior to 10.1.1.

  • You can duplicate the PaaS backup image to a supported storage server. But before you start a restore, you need to duplicate the image back to an MSDP server with universal share enabled. See Recovering duplicate images from AdvancedDisk.

  • With NetBackup 10.3, you can perform backup and restore of supported Azure PaaS databases with Managed Identity database authentication. This is not supported for the Azure Database for MariaDB server. This feature requires at least one media server with version 10.2 or higher.

  • For authentication of Azure databases, it is recommended to use User Assigned managed identity to work across all media servers. A database user with a system-assigned managed identity, which is associated with the media server or vm-scale-set (AKS/EKS), does not work with any other media server or media in any other vm-scale set (AKS/EKS).

  • Azure Managed Identity is not supported across subscriptions of different and same tenants.

  • For PaaS assets, the recovery logs are not available under Recovery > JobID > Logs. You can view the recovery logs either from the activity monitor or from the Restore activity tab, under asset details.

  • Restore operation of the PaaS assets requires view permission for the storage server. If the storage server version is older than 10.2, additional view and create permissions for Ushare are required, along with view permissions of the storage server.

    If the logged-on user does not have view permissions for the storage server, then NetBackup tries to fetch the existing UShares during a restore. If no Ushares exist, NetBackup creates a new one named dbpaasrestore during the restore. NetBackup starts the recovery job subsequently.

Feedback

Was this page helpful?
Previous

Limitation and considerations

Next

For PostgreSQL

Feedback

Was this page helpful?