Learning how eliminating SSH protects the server
Secure Shell (SSH) is a method that's used to connect remotely to Linux servers. This service was required before Veeam Backup & Replication v11a for adding a Linux repository to the Veeam infrastructure. Now, with v11a, you can use single-use credentials to add a Linux repository. This ability eliminates the need to keep the SSH service running on your server, adding an extra layer of security.
For further security and hardening guidelines, go to https://helpcenter.veeam.com/docs/backup/vsphere/hardened_repository_tips.html?ver=110.
With v11a, the former SSH protocol usage gets encapsulated into the expanded transport protocol. This results in the SSH connectivity only being required at the initial deployment and when installing product updates. This change allows for secure SSH with interactive multi-factor authentication (MFA) and can even disable the SSH server completely to protect your repository. This will even...