Ransomware attackers specifically target and attempt to destroy backup systems to increase the probability of payment. Hardening your system is critical. Please ensure you have reviewed your platform security using the Security Hardening Checklist
Cohesity

COHESITY Documentation

Explore our documentation to get started, discover products & new features, access troubleshooting guides, register sources, platforms support.

Products
Data Security Alliance
Visit Cohesity.com
Demos
Support
Blogs
Developers
Partner Portals
Cohesity Community
© 2026 Cohesity, Inc. All Rights Reserved.
Terms of Use|
Privacy Policy|
Legal|
  1. Home
  2. NetBackup Web UI Vault Administrator's Guide
  3. Best Practices
  4. About preferred vaulting strategies
  5. About Vault original backups
NetBackup Web UI Vault Administrator's Guide

About Vault original backups

Cohesity recommends that you use a NetBackup policy to produce multiple, original backup images. You should then use a Vault profile to eject and transfer one or more of the original images off site.

In most situations, vaulting originals has the following advantages:

  • Uses less drive-time than duplicating backup images from the original tapes. For example, a backup job that creates two originals of a backup image uses two drives: two units of drive time. Conversely, a backup job that creates one original image uses one drive, and a vault job that creates one duplicate of the original uses two drives: three units of drive time. Over time, duplicating backup images consumes more drive time than writing multiple originals during a backup job.

  • Avoids configuring for duplication. In complex environments (such as with multiple media servers, multiple robots, or multiple retention period requirements), it can be difficult to configure the duplication steps of Vault profiles. It is possible to send large amounts of data over the network without careful configuration, although in storage area network (SAN) environments network traffic may not be an issue.

  • Use VTL tapes. You can send your backups to VTL tapes with minimum retention period required for your recovery. You can then duplicate to physical tapes from VTL tapes and expire the VTL tape copy using the Expire original tape backup images after xxx hour(s) setting.

See the following information before you configure Vault, if you decide to create and vault original backups:

See About vaulting original backups in a 24x7 environment.

See About avoiding vaulting partial images.

Feedback

Was this page helpful?
Previous

About preferred vaulting strategies

Next

About how to ensure that data is vaulted

Feedback

Was this page helpful?