Today, I’m returning to my blog and getting back into writing. Before diving into this new post, I want to share a bit about my absence. The year 2024 was quite a ride for me. I achieved a major life goal by publishing my book on vSphere, and with the Broadcom vs VMware issues, it was not the best time to publish a book about VMware vSphere. Simultaneously, my family business launched in September 2023, taking off under my wife’s leadership in 2024. Alongside these successes, I faced personal challenges and ultimately lost my job toward the year’s end. It was a roller coaster of emotions that made writing something I wasn’t initially eager to do. Despite having numerous blog post drafts, I couldn’t finish them.
Reflecting on 2024 is just part of life’s journey. I have always stayed positive and stuck to my professional path, believing that things will eventually fall into place.
I believe my long-time readers (more than 200,000 annually) deserve an explanation for my absence from writing. Now, though, I’m excited to return, ready to create and share the best content and knowledge, both on this blog and within the community.
Since Veeam will launch Veeam Backup & Replication v13 soon, I think it makes sense to start my return with Veeam Backup & Replication last update(launched last December), v12.3. We will discuss what is new and how to use it in this Veeam Backup & Replication v12.3: What’s New and Why It Matters.
Before we discuss the new features, let’s review the upgrade process. We have discussed this many times, and the process remains the same. To upgrade to v12.3, these are the supported deployments of Veeam Backup & Replication (11a, 12, 12.1, 12.2).
As always, start by upgrading Veeam Enterprise Manager before proceeding with the other components. The upgrade process remains the same as in previous versions, with no additional changes. Simply download the V12.3 ISO, follow the installation steps, and upgrade the components.
As the demand for advanced data protection grows, Veeam continues delivering cutting-edge solutions with this Backup & Replication v12.3 release. Packed with innovative features, this update focuses on enhancing security, streamlining management, and supporting modern workloads to meet the needs of hybrid IT environments. Veeam has consistently been at the forefront of data protection, and with the release of Veeam Backup & Replication v12.3, the company has once again raised the bar. This latest update introduces many new features and enhancements designed to strengthen cybersecurity, improve operational efficiency, and provide unparalleled flexibility across hybrid and multi-cloud environments.
In this blog post Veeam Backup & Replication v12.3: What’s New and Why It Matters, we’ll explore the key updates in Veeam Backup & Replication v12.3 and how they can help your organization stay ahead in the ever-evolving world of data protection.
Introduction to Veeam Backup & Replication v12.3
Veeam Backup & Replication v12.3 is the latest iteration of Veeam flagship data protection solution. It builds on the robust foundation of previous versions, introducing advanced capabilities to address modern cybersecurity threats, enhance recovery processes, and provide greater flexibility in managing complex IT environments. Whether you’re protecting on-premises workloads, cloud-based applications, or hybrid infrastructures, v12.3 offers the tools you need to ensure data resilience and business continuity.
Key Features and Enhancements in v12.3
- Enhanced Cyber Resiliency:
IoC Detection is a security feature in Veeam Backup & Replication 12.3 that scans backup data for suspicious activity, malware, and hacker tools before restoration. Leveraging threat intelligence and file system indexing helps prevent reinfection by identifying compromised data before it is restored.
- What is Indicators of Compromise (IoC) Detection?
IoC Detection allows automated scanning of backup data for known attack patterns, unauthorized file modifications, and potential breaches. It enhances security by detecting early signs of compromise, preventing organizations from restoring infected backups.
- What is Indicators of Compromise (IoC) Detection?
- How does Indicators of Compromise (IoC) Detection work?
Veeam analyzes backup data using a database of known IoCs, detecting threats like unauthorized encryption, malware, and suspicious file changes. It works with or without guest file system indexing, ensuring real-time alerts for IT teams to investigate before restoring backups.
- How does Indicators of Compromise (IoC) Detection work?
- What changed from previous versions?
New in V12.3: IoC detection fully integrates into backup workflows, enabling automated threat scanning before restoration. Previously, users had to rely on manual inspections or third-party tools for security checks.
- What changed from previous versions?
- Veeam Threat Hunter:
Combining the speed of YARA scans with the breadth of malware detection found in traditional antivirus solutions, Veeam Threat Hunter is integrated directly into the backup engine. It uses machine learning and heuristic analysis to identify advanced threats like polymorphic malware, ensuring faster and more accurate threat detection.
- What is Veeam Threat Hunter?
Veeam Threat Hunter is an advanced malware detection engine integrated into Veeam Backup & Replication 12.3. It enhances security by scanning backup data for hidden threats using YARA rules, machine learning, and heuristic analysis. This ensures that restored data is malware-free before being reintroduced into production.
- What is Veeam Threat Hunter?
- How does Veeam Threat Hunter work?
Veeam Threat Hunter mounts backup disks and performs real-time scans to identify malware, ransomware, and other cyber threats. It leverages YARA-based pattern matching and machine learning models to detect polymorphic and evolving threats that traditional antivirus solutions might miss. The threat database updates multiple times daily, providing up-to-date protection against new and emerging attacks.
- How does Veeam Threat Hunter work?
As the next image shows, Veeam Threat Hunter in V12.3 eliminates the need for third-party antivirus tools by using built-in YARA-based scanning during Secure Restore.
- Inline Malware Detection:
This feature performs real-time entropy analysis during backups to detect signs of ransomware encryption. By identifying sudden changes in file encryption, Veeam can alert administrators to potential ransomware attacks before they spread, enabling faster response and mitigation.
- What is Inline Malware Detection?
Inline Malware Detection is a security feature in Veeam Backup & Replication 12.3 that monitors backup data for unexpected encryption patterns. It helps detect early signs of ransomware attacks, allowing administrators to take action before the infection spreads.
- What is Inline Malware Detection?
- How does Inline Malware Detection work?
Veeam analyzes data entropy in real-time during the backup process, looking for sudden spikes in encryption activity. If previously unencrypted files become encrypted, the system flags them as suspicious and alerts administrators. This helps identify ransomware activity early, reducing the risk of backing up compromised data.
- How does Inline Malware Detection work?
- What changed from previous versions?
New in V12.3: This version introduces Inline Malware Detection and real-time backup scanning for ransomware activity.
- What changed from previous versions?
The scan option is also now included in the backup, not just the restore.
The key change in V12.3 is the introduction of proactive, inline threat detection, eliminating the reliance on post-backup security scans.
- Indicators of Compromise (IoC) Detection: Previously, Veeam users had to rely on manual inspections or external tools to identify security breaches. V12.3 automates IoC detection, scanning backups for hacker tools, ransomware artifacts, and suspicious modifications before restoration.
- Veeam Threat Hunter: Before V12.3, malware scanning depended on third-party antivirus integrations. Now, Veeam Threat Hunter is fully integrated, using YARA rules, machine learning, and heuristic analysis to detect advanced threats within backup data.
- Inline Malware Detection: Earlier, Veeam performed malware scanning only during restore using external antivirus tools. With V12.3, malware detection happens in real-time during the backup process, preventing ransomware-encrypted data from being backed up in the first place.
These enhancements in V12.3 ensure faster, more accurate, and automated security monitoring for backup data, reducing the risk of restoring or preserving compromised files.
Expanded Workload Support
As IT environments become more diverse, Veeam continues to expand its backup capabilities to cover a wider range of workloads, ensuring organizations can protect their data no matter where it resides. With V12.3, Veeam introduces enhanced support for modern platforms, including expanded cloud integrations, additional hypervisor support, and improved database protection. These advancements help businesses maintain seamless data availability across on-premises, cloud, and hybrid environments.
- Microsoft Entra ID:
V12.3 introduces support for backing up and restoring Microsoft Entra ID (formerly Azure AD). This feature allows organizations to quickly recover from accidental changes, malicious attacks, or automated threats, ensuring business continuity and compliance.
- What is Microsoft Entra ID Backup?
Microsoft Entra ID Backup is a new Veeam Backup & Replication 12.3 capability that enables secure and automated backups of Microsoft Entra ID objects, configurations, and permissions. It helps organizations recover critical identity services in case of data loss or security incidents.
- What is Microsoft Entra ID Backup?
- How does Microsoft Entra ID Backup work?
Veeam captures directory structure, user groups, policies, and permissions from Microsoft Entra ID and stores them in a secure backup repository. Administrators can quickly restore individual objects or entire configurations in case of an issue to minimize downtime and security risks.
- How does Microsoft Entra ID Backup work?
- What changed from previous versions?
New in V12.3: Native support for Microsoft Entra ID backup did not exist in earlier versions.
Before V12.3, organizations had to rely on Microsoft-native recovery options or third-party tools for identity protection.
- What changed from previous versions?
- Microsoft Windows Server 2025 (including Hyper-V 2025 and SCVMM 2025):
With official support for Windows Server 2025 and Windows 11 24H2, Veeam ensures that organizations can seamlessly upgrade to the latest Microsoft releases while maintaining reliable backup and recovery. This includes Hyper-V 2025, SCVMM 2025, and SharePoint SE 24H2 support. Additionally, V12.3 introduces new support for migrating VMs from VMware to Hyper-V 2025, helping businesses transition between platforms with minimal downtime.
- What is Microsoft Windows Server 2025 Support?
Veeam Backup & Replication 12.3 introduces native compatibility with Windows Server 2025, Hyper-V 2025, and SCVMM 2025, allowing for seamless backup, restore, and replicating of virtualized and physical workloads running on Microsoft latest platforms. New migration tools now enable direct VMware-to-Hyper-V 2025 transitions, simplifying cross-platform moves.
- What is Microsoft Windows Server 2025 Support?
- How does Microsoft Windows Server 2025 Support work?
Veeam enables full backup, granular recovery, and replicating Windows Server 2025 environments, ensuring compatibility with the latest Hyper-V 2025 and SCVMM 2025 versions. The integration supports new OS features, optimized snapshot handling, and enhanced performance for virtualized workloads. VMware to Hyper-V 2025 migration tools facilitate a smooth transition, reducing the complexity of infrastructure changes.
- How does Microsoft Windows Server 2025 Support work?
- Nutanix AHV Enhancements
V12.3 brings advanced capabilities for Nutanix AHV environments, including application-aware processing, guest file system indexing, and inline malware detection. These features provide deeper visibility and faster recovery options for Nutanix workloads.
- What is Nutanix AHV Enhancements?
The Nutanix AHV enhancements in Veeam Backup & Replication 12.3 introduce better workload protection, application consistency, and security improvements. With guest file system indexing and inline malware detection, organizations gain faster recovery, better searchability, and stronger ransomware defense for their AHV backups.
- What is Nutanix AHV Enhancements?
- How does Nutanix AHV Enhancements work?
Application-Aware Processing – Ensures application-consistent backups for databases and critical workloads running on Nutanix AHV.
Guest File System Indexing – Enables granular search and recovery by cataloging files within backups.
Inline Malware Detection – Scans Nutanix AHV backups during the backup process, preventing infected data from being stored.
- How does Nutanix AHV Enhancements work?
- What changed from previous versions?
New in V12.3: Nutanix AHV now supports application-aware processing, guest file indexing, and inline malware scanning.
V12.3 improves Nutanix workload protection by making backups faster to search, recover, and secure against malware threats.
- What changed from previous versions?
- MongoDB, PostgreSQL, and Oracle RMAN
V12.3 supports the latest versions of MongoDB 8, PostgreSQL 17, and Oracle 23ai, ensuring organizations can protect their critical databases with application-aware backups and granular recovery options.
- What is MongoDB, PostgreSQL, and Oracle RMAN Support?
Veeam Backup & Replication 12.3 now offers native backup integration for MongoDB 8, PostgreSQL 17, and Oracle 23ai, providing businesses with consistent, reliable, and efficient protection for these databases. The support includes application-aware processing, transaction log management, and fast recovery.
- What is MongoDB, PostgreSQL, and Oracle RMAN Support?
- How does MongoDB, PostgreSQL, and Oracle RMAN Support work?
Application-Aware Backups – Ensures consistent snapshots of databases without affecting production performance.
Granular Recovery – Enables recovery of individual databases, tables, or transactions rather than restoring full backups.
Transaction Log Management – Allows for point-in-time recovery, preventing data loss in case of corruption or accidental deletion.
- How does MongoDB, PostgreSQL, and Oracle RMAN Support work?
- What changed from previous versions?
New in V12.3: Official support for MongoDB 8, PostgreSQL 17, and Oracle 23ai, ensuring full backup and restore compatibility.
- What changed from previous versions?
Veeam Data Cloud Vault
As businesses increasingly rely on cloud storage for backup and disaster recovery, traditional solutions often introduce complexity, additional costs, and security concerns. Organizations must ensure that offsite backups are secure, immutable, and easily accessible without relying on third-party cloud providers. Veeam Data Cloud Vault was developed to provide a fully integrated, first-party cloud storage solution that simplifies offsite backup management while maintaining high durability and security. By eliminating the need for external object storage providers, Cloud Vault enables businesses to protect their critical data with minimal setup, predictable costs, and built-in immutability.
- What is Veeam Data Cloud Vault?
Veeam Data Cloud Vault is a fully managed cloud storage service designed for secure and immutable offsite backups. It ensures ransomware protection, high durability, and simple Veeam Backup & Replication integration, eliminating the need for third-party cloud storage solutions.
- How does Veeam Data Cloud Vault work?
Uncompromising Security – Data is always immutable and encrypted, with up to 12 nines (99.9999999999%) of durability, ensuring ransomware resilience and data integrity.
Simplified Onboarding – A streamlined provisioning process allows organizations to set up and monitor their cloud storage directly from the Veeam Data Platform.
Flexible Pricing – It is now available in two new editions, tailored for primary and secondary backup use cases, offering cost-effective, predictable pricing.
- What changed from previous versions?
New in V12.3: Enhanced security, onboarding, and pricing models for Veeam native cloud storage service.
Before V12.3, users had to rely on third-party object storage providers for cloud backups, requiring separate account management and configuration.
V12.3 simplifies offsite backup storage, providing a native, fully integrated, and highly secure cloud vault directly within Veeam.
Additional Enhancements in Veeam Data Cloud Vault (V12.3)
Beyond the previously mentioned improvements, Veeam Data Cloud Vault in V12.3 introduces further enhancements for ease of use, security, and cost efficiency:
- Unmatched flexibility – Vault can now be a backup target in any product edition, including the Community Edition, which typically does not allow backup to object storage.
- Smart bucket provisioning – Newly created standalone object storage repositories can now automatically provision a new bucket for every specified number of workloads, improving storage organization and manageability.
- Enhanced reliability – Improved background checkpoint removal processes reduce unnecessary failure reports related to object storage latency and provide more insights on storage connectivity issues.
Veeam Intelligence: AI-Driven Insights
V12.3 introduces Veeam Intelligence, an AI-powered analytics and assistance tool that enhances backup performance, simplifies troubleshooting, and provides proactive risk assessments within the Veeam Data Platform.
- What is Veeam Intelligence?
Veeam Intelligence is a machine-learning-driven feature that leverages AI-based insights to help administrators optimize backup performance, detect potential risks, and streamline issue resolution. It integrates directly into the Veeam Data Platform, offering automated recommendations and real-time reporting.
- How does Veeam Intelligence work?
AI-Powered Assistance – Uses the Veeam AI Assistant to provide natural language-based recommendations, helping administrators fine-tune backup jobs, troubleshoot failures, and optimize resource allocation.
Proactive Risk Mitigation – Identifies potential issues before they impact recovery, offering automated insights on misconfigurations, storage performance, and infrastructure bottlenecks.
Advanced Mode – Delivers detailed analytics on backup infrastructure and production workloads, allowing IT teams to make data-driven decisions for capacity planning and disaster recovery strategies.
- What changed from previous versions?
New in V12.3: Veeam Intelligence is a brand-new feature that brings AI-driven automation and analytics to the Veeam Data Platform.
AI-Driven Data Recovery: A Smarter Approach
As cyber threats grow more sophisticated, businesses need smarter ways to protect and recover their data. AI and machine learning (ML) are transforming data recovery by making backups more resilient, efficient, and proactive. Instead of relying on manual monitoring and static recovery strategies, AI-driven insights help identify risks before they impact operations, optimize backup performance, and automate troubleshooting.
With AI, recovery processes become faster and more reliable, reducing downtime and improving business continuity. Automated recommendations allow IT teams to focus on strategic tasks instead of routine backup management, while intelligent analytics enhance security by detecting anomalies that could indicate ransomware or system failures.
Veeam Intelligence in V12.3 brings these AI capabilities directly into the backup environment, helping organizations proactively secure, optimize, and automate their data protection strategy.
Continuous Data Protection (CDP) Enhancements
Before Veeam introduced CDP, backups relied on snapshot-based replication, which could result in data loss between snapshots, depending on the backup schedule. While effective, this method had limitations in achieving ultra-low RPOs, especially for mission-critical applications. With the release of Veeam Backup & Replication 11, Continuous Data Protection (CDP) was introduced, providing near-zero RPOs by continuously replicating changes at the I/O level rather than waiting for scheduled snapshots. This marked a major improvement in disaster recovery, ensuring that organizations could fail over to an almost real-time replica in case of failure.
However, CDP had limitations in versions 11 and 12, including maximum short-term retention of 24 hours and a lack of policy cloning, requiring administrators to configure CDP policies for each workload manually. In V12.3, Veeam improves CDP by extending short-term retention up to 7 days, allowing businesses to maintain ultra-low RPOs over longer periods. Additionally, policy cloning simplifies management, enabling administrators to duplicate CDP configurations across multiple workloads quickly.
- What is Continuous Data Protection (CDP)?
CDP is a Veeam Backup & Replication feature that provides real-time replication of virtual machines (VMs), ensuring that data remains continuously protected without relying on snapshots. This enables businesses to recover their systems from the most recent state in case of failure, significantly reducing downtime and data loss.
Unlike traditional backup methods, which capture snapshots at scheduled intervals, CDP allows organizations to maintain near-zero RPOs, making it ideal for mission-critical applications where every second of data matters.
- How does Continuous Data Protection (CDP) work?
CDP captures and replicates changes at the I/O level using VMware I/O filter technology, allowing data to be continuously protected without relying on traditional snapshots. This ensures that VMs can be recovered from the most recent state at any given time, significantly reducing downtime in case of failure. Because no snapshots are used, CDP also avoids the typical performance overhead associated with snapshot-based replication, keeping production environments running smoothly.Extended retention options – With V12.3, organizations can now retain short-term restore points for up to 7 days, compared to the previous 24-hour limit. This provides a longer rollback window, making it easier to recover data from different points in time, even during weekends or extended holidays.
Automated policy cloning – The new CDP policy cloning feature simplifies management by allowing administrators to duplicate existing policies across multiple workloads, ensuring consistent disaster recovery configurations without the need for manual setup.
- What changed from previous versions?
The most significant enhancement in V12.3 is the extension of short-term retention from 24 hours to 7 days, providing businesses with greater recovery flexibility. Previously, CDP only allowed for a one-day rollback window, which could be challenging in cases where issues were detected late or during extended non-working hours. With the ability to recover data from any point in the past week, organizations now have more time to identify and respond to issues before recovering.
Additionally, the introduction of CDP policy cloning significantly reduces administrative overhead. In previous versions, creating a new CDP policy required manual configuration for each workload. Now, administrators can clone existing policies, making it easier to enforce consistent protection settings across multiple environments. These improvements ensure that Veeam CDP technology is more adaptable, scalable, and easier to manage, giving organizations greater confidence in their disaster recovery strategies while minimizing downtime and data loss.
Unstructured Data Backup Improvements
Unstructured data, such as files stored on NAS devices and cloud file services, represents a growing business challenge. As data volumes continue to expand, organizations need efficient and scalable backup solutions to ensure protection without disrupting operations. Veeam Backup & Replication 12.3 introduces new enhancements to optimize NAS and file share backups, making them faster and more storage-efficient.
What’s New in V12.3 for Data Backup?
- NetApp SnapDiff Integration – This feature allows backup jobs to query a list of changed or removed files instead of scanning the entire file share. By leveraging NetApp SnapDiff API, Veeam significantly reduces the impact on production storage systems, speeding up incremental backups and improving efficiency.
- NetApp FSx Support – V12.3 now provides full support for Amazon FSx for NetApp ONTAP, allowing organizations to securely back up and restore cloud-hosted file shares. This ensures seamless protection for unstructured data stored in AWS environments.
These improvements provide faster backup times, lower resource consumption, and greater flexibility for businesses relying on NAS and cloud-based storage solutions. By integrating directly with NetApp SnapDiff and FSx for ONTAP, Veeam continues enhancing its enterprise-scale file protection capabilities.
API and PowerShell Enhancements
Automation and integration are crucial in modern backup environments, allowing organizations to streamline operations and improve efficiency. With V12.3, Veeam enhances its PowerShell and REST API capabilities, providing administrators with more control over backups, license management, and data accessibility. These updates simplify backup management and enable deeper automation for IT teams.
What’s New in V12.3 for API and Powershell?
- Microsoft Entra ID Backup and Restore – New PowerShell cmdlets and REST API endpoints allow administrators to automate the backup and restore of Microsoft Entra ID (formerly Azure AD) tenants and audit logs. This ensures that identity management data is always protected and quickly recoverable.
- Data Integration API – A newly introduced API enables seamless access to backup data from any server in the environment without requiring additional Veeam components. This simplifies integration with third-party applications, making data retrieval and analysis more flexible.
- License Management Automation – Administrators can now use REST API endpoints to automate license assignment, updates, and reporting, making it easier to manage and track Veeam licensing consumption.
These enhancements give organizations greater flexibility in automating backup processes, ensuring smooth operations and faster recovery. By expanding API capabilities, Veeam V12.3 empowers IT teams to build scalable and efficient backup strategies.
Why Upgrade to Veeam Backup & Replication v12.3?
Veeam Backup & Replication v12.3 is more than just an update—it’s a significant step forward in data protection, security, and automation. As organizations face increasingly sophisticated cyber threats, stricter compliance requirements, and the need to protect an ever-growing volume of workloads, V12.3 delivers the innovations necessary to stay ahead.
With enhanced malware detection, expanded workload support, AI-powered insights, and improved automation, this version ensures that businesses can recover faster, manage backups more efficiently, and strengthen their cybersecurity posture. From protecting critical infrastructure to optimizing cloud storage, V12.3 brings meaningful improvements that make a real difference in day-to-day IT operations.
- Stronger Cyber Resilience
New security features like Indicators of Compromise (IoC) Detection, Veeam Threat Hunter, and Inline Malware Scanning proactively identify and stop threats before they impact production environments. - Broader Workload Protection
Expanded support for Microsoft Entra ID, Windows Server 2025, Nutanix AHV, and unstructured data ensures businesses can back up and recover all mission-critical workloads without compatibility concerns. - Greater Intelligence & Automation
AI-driven features like Veeam Intelligence and improved APIs help IT teams optimize backup strategies, predict potential failures, and automate complex recovery processes.
These improvements enhance reliability and performance and simplify backup management, ensuring that organizations can focus on innovation instead of worrying about data loss. V12.3 isn’t just an upgrade; it is a smarter, more secure, and more efficient way to protect your data.
Conclusion
Veeam Backup & Replication v12.3 represents a significant evolution in data protection, offering a smarter, more resilient, and more efficient approach to backup and recovery. With every update, Veeam continues to refine its platform, addressing modern IT challenges with advanced automation, stronger security, and expanded workload support. This version is not just about new features but about what they enable, giving IT teams greater control, reducing complexity, and ensuring data remains protected against both cyber threats and operational failures. By integrating AI-driven insights, seamless cloud storage options, and enhanced automation capabilities, V12.3 strengthens resilience and optimizes backup strategies for long-term success.
For businesses looking to stay ahead in an ever-changing landscape, Veeam Backup & Replication v12.3 is more than an upgrade, it is an investment in a secure, intelligent, and future-proof data protection strategy. Now is the time to take full advantage of these advancements and ensure your organization is ready for whatever comes next. If you are prepared to enhance your data protection, upgrade to Veeam Backup & Replication v12.3 now!
For more information, check out:
Share this article if you think it is worth sharing. If you have any questions or comments, comment here or contact me on Twitter (yes, it is Twitter, not X).
Leave A Comment