Veritas · Infrastructure · YoctoIT tech page

Flex Appliance

The hardened appliance for NetBackup: containerized multi-tenant instances, WORM immutability and lockdown mode — the armored iron of data protection.

FOCUS · THE ARMORED IRONOne appliance, many isolated instances: consolidation and security without compromise
Request the Free Assessment Learn more
YoctoIT material for clients and partners · Veritas, NetBackup, Alta and the other products mentioned are trademarks of Cohesity, Inc.
01 · What it is

Flex Appliance, made clear.

Flex Appliance is the reference infrastructure for NetBackup: an appliance running isolated containerized instances (primary, media, MSDP) in multi-tenancy, with immutable WORM storage, lockdown mode and a hardened OS. It consolidates multiple backup domains on the same iron while keeping isolation — and raises a wall against ransomware and insiders.

WORM
immutable storage with retention lock: untouchable copies
Multi-instance
several isolated NetBackup environments on the same iron
Lockdown
the mode that blocks changes and access: the secure default
Flex Appliance
OFFICIAL BRANDING VERITAS
02 · How to use it well

The things that make the difference.

The appliance

Backup domainsproduction · BUs · customers
Primary instance
Media/MSDP instance
Instance N
isolated containers · multi-tenant · QoS
Flex Appliancehardened OS · lockdown mode
WORM storageimmutable with compliance clock
Consolidation without security trade-offs

Real consolidation

Less iron, more order: backup domains coexist isolated on the same appliance.

Certified immutability

WORM with compliance clock: not even vendor support shortens retention.

Minimal surface

Hardened custom OS, essential services, tracked access: little to attack.

Orchestrated upgrades

Instances update in sequence: protection doesn't stop.

03 · In depth

Containers, WORM and lockdown: the armor explained

NetBackup instances run as isolated containers with guaranteed resources: a compromised domain can't touch the others; WORM storage applies filesystem-level retention lock with an independent compliance clock (no NTP tricks); lockdown mode disables system changes and restricts admin access with MFA; all on redundant hardware with single support — the appliance is the perimeter, not just the container.

  • Container instances — isolation between domains: clean multi-tenancy
  • Compliance clock — the clock that won't move: retention guaranteed
  • Lockdown mode — operationally read-only system: changes blocked
  • Admin MFA — access to the iron: armored
  • Per-instance QoS — guaranteed resources: the noisy neighbor doesn't exist
  • Single support — hardware + software + security: one number to call
04 · Numbers and lifecycle

The numbers that matter.

N
isolated instances per appliance: real consolidation
0
changes possible in lockdown mode
WORM
compliance-grade immutability
1
vendor for the whole stack: accountability
Armored backup starts from the iron: Flex is the vault — we size it and keep it current.
05 · Use cases

Where it really pays off.

Anti-ransomware

Copies on WORM: untouchable.

Service providers

Isolated tenants on the same iron.

Consolidation

Three backup domains, one appliance.

How much iron does your NetBackup need? Less than you think, if it's Flex: let's size it.