CryptoSafeGuard Settings

These settings are used to enable or disable CryptoSafeGuard, and to manage the SMS notifications and the CryptoSafeGuard whitelist. Any changes to the whitelist applies to all backup jobs. For more information, see BackupAssist CryptoSafeGuard

CryptoSateGuard Settings

To configure CryptoSafeGuard in BackupAssist:

  1. Select BackupAssist’s Settings tab.
  2. Select CryptoSafeGuard.
  3. Make the required changes as outlined in the sections below.

Note: When your backup destination is a NAS or network share, it should be secured using best practice data security. This means only machines running BackupAssist and CryptoSafeGuard should have access to the folders that the backups are in, and those folders should only allow access to the Backup User Identity.

Disabling and Enabling CryptoSafeGuard

Removing the tick from the box beside Enable CryptoSafeGuard protection will disable CryptoSafeGuard. Ticking this box will enable CryptoSafeGuard.

If CryptoSafeGuard is disabled, all jobs will be automatically unblocked, if they are currently blocked due to a potential ransomware infection.

Deselecting Enable Shield will disable the CryptoSafeGuard Shield feature, which we do not recommend unless you have consulted with BackupAssist Technical support. CryptoSafeGuard Shield prevents unauthorized processes from creating, deleting or updating data in your backups, and is an important component of CryptoSafeGuard's ransomware protection.

SMS notification tab

If you set up SMS notifications, SMS alerts will be sent when CryptoSafeGuard detects a possible ransomware infection.

SMS Number

Enter the phone number that is to receive the notifications into this field using the standard international phone number format “+<country code><mobile phone number>”.

Detection Message

Enter an identifier or description for this machine. This is especially useful if you manage a lot of servers and need to know exactly what server the message has come from.

SMS Test

The SMS test button will become active once a phone number has been entered in the correct format. Click Test and a test message will be sent to that phone.

CryptoSafeGuard uses a third-party provider for SMS notifications. Click these links to view the provider's Privacy and Security information.

Whitelist tab

If you respond to a CryptoSafeGuard alert by whitelisting files, you can review and change your whitelist using the Manage Whitelist section of the CryptoSafeGuard Settings dialog. You can also use this dialog to add to your whitelist without an alert, but it is recommended that you use the alert list to inform your whitelisting decisions.

The Manage Whitelist sections allow you to add, modify and delete whitelisted files, directories, and file extensions. Any files whitelisted in the CryptoSafeGuard alert dialog will automatically appear here.

Note: Adding files and folders to the whitelist means they are excluded from CryptoSafeGuard’s scan when a backup job starts. It is important to only whitelist files that create, or are expected to create, false positive responses when the scan runs.

Advanced tab

In addition to checking that your files are not infected before backing them up, CryptoSafeGuard also prevents ransomware from spreading to your backup destinations using its Shield feature. To trouble shoot backup destination problems, BackupAssist support may ask you to disable this shield. This tab allows you to disable CryptoSafeGuard Shield, by deselecting the Enable Shield tick box.