These settings are used to enable or disable CryptoSafeGuard, and to manage the SMS notifications and the CryptoSafeGuard whitelist. Any changes to the whitelist applies to all backup jobs. For more information, see BackupAssist CryptoSafeGuard
To configure CryptoSafeGuard in BackupAssist:
- Select BackupAssist’s Settings tab.
- Select CryptoSafeGuard.
- Make the required changes as outlined in the sections below.
Note: When your backup destination is a NAS or network share, it should be secured using best practice data security. This means only machines running BackupAssist and CryptoSafeGuard should have access to the folders that the backups are in, and those folders should only allow access to the Backup User Identity.
Disabling and Enabling CryptoSafeGuard
Removing the tick from the box beside Enable CryptoSafeGuard protection will disable CryptoSafeGuard. Ticking this box will enable CryptoSafeGuard.
If CryptoSafeGuard is disabled, all jobs will be automatically unblocked, if they are currently blocked due to a potential ransomware infection.
Deselecting Enable Shield will disable the CryptoSafeGuard Shield feature, which we do not recommend unless you have consulted with BackupAssist Technical support. CryptoSafeGuard Shield prevents unauthorized processes from creating, deleting or updating data in your backups, and is an important component of CryptoSafeGuard's ransomware protection.
SMS notification tab
If you set up SMS notifications, SMS alerts will be sent when CryptoSafeGuard detects a possible ransomware infection.
Enter the phone number that is to receive the notifications into this field using the standard international phone number format “+<country code><mobile phone number>”.
Enter an identifier or description for this machine. This is especially useful if you manage a lot of servers and need to know exactly what server the message has come from.
The SMS test button will become active once a phone number has been entered in the correct format. Click Test and a test message will be sent to that phone.
If you respond to a CryptoSafeGuard alert by whitelisting files, you can review and change your whitelist using the Manage Whitelist section of the CryptoSafeGuard Settings dialog. You can also use this dialog to add to your whitelist without an alert, but it is recommended that you use the alert list to inform your whitelisting decisions.
The Manage Whitelist sections allow you to add, modify and delete whitelisted files, directories, and file extensions. Any files whitelisted in the CryptoSafeGuard alert dialog will automatically appear here.
Ignored File Extensions
This field is used to manage whitelisted file extensions, which excludes all files with that extension from the CryptoSafeGuard scan.
To add a file extension:
- Select Add
- Enter the file extension. Do NOT include periods or wildcard symbols. E.g. enter txt. Not .txt or *.txt.
- Select Add.
- Repeat this process for each file extension. Do not enter multiple extensions as a single entry.
Use the Remove button to remove the selected file extension from the list and the Edit option to edit an existing entry. Select Save after making manual changes.
This field is used to manage whitelisted directories, which excludes all files inside the directory from the CryptoSafeGuard scan. Use the Add button to browse to the directory and add it, and the Remove button to remove the selected directory from the list. Selecting Edit will allow you to manually edit the entry, or browse from the entries location. Select Save after making manual changes.
Ignored File Paths
This field is used to manage whitelisted files. Use the Add button to browse to the file and add it, and the Remove button to remove the selected file from the list. Selecting Edit will allow you to manually edit the entry, or browse from the entries location. Select Save after making manual changes.
Note: Adding files and folders to the whitelist means they are excluded from CryptoSafeGuard’s scan when a backup job starts. It is important to only whitelist files that create, or are expected to create, false positive responses when the scan runs.
In addition to checking that your files are not infected before backing them up, CryptoSafeGuard also prevents ransomware from spreading to your backup destinations using its Shield feature. To trouble shoot backup destination problems, BackupAssist support may ask you to disable this shield. This tab allows you to disable CryptoSafeGuard Shield, by deselecting the Enable Shield tick box.