MachPanel Knowledgebase

Cyber Security and Backups

zohaib.shaikh — Fri, 14 Oct 2022 13:56:25 GMT

Summary

This article is about how to secure data and keep your Machpanel system backed up.

DATA SECURITY

It is an established fact that data is the most critical part of any business today. There is always a chance that big businesses in cloud and hosting industry and their customers/users become a target for cybercrime.

With this ever growing concern of a backdoor/bug penetrating through external sources, it is important that all our customers are aware of known security risks and do their best to take all necessary precautions.

KEY NOTES ON DATA SECURITY

These precautions may include but be limited to:

Ensuring strong passwords in combination with 2FA,
Changing the passwords on regular intervals or set up automatic password expiring policy
Implementing the IP Blocking feature thereby allowing admin access from specific IPs only.
Implement Port blocking via Firewall so that only the required ports are enabled.
Up to date Antivirus protection should be implemented to present a security layer.
To maintain regular Online and Offline Backups (daily backups). These backups should be put in password protected zip file and stored at multiple sources so that even if one machine is affected by a security breach, the backup from other location would allow effective restoration of business data and activities.

SECURITY GUIDELINES:

To be more elaborative, we would like our customers to familiarize themselves with and adhere to the below security guidelines:

1. Update Applications and System when available.

Keep Browsers & Plugins updated
Update the OS & other applications
Use Security applications, such as anti-virus/anti-malware

· Choose reputable, well-known, well-tested

Choose secure settings recommended by the software vendor
Keep Security applications updated

· Use Stable versions with latest security patches

Remove unnecessary/insecure 3rd-party apps, especially those of low reputation

Configure Multi-Factor Authentication for sensitive user accounts.
Be a part of Secure Network
1. Minimize open network ports, open only TCP 443 for MachPanel Front Facing. And TCP 7860 for MachPanel Control and Remote communication on Internal Network.
2. Manage and audit firewall and firewall rules
3. Monitor and log all access attempts
4. Use IP Lockdown / Blocking, Port Blocking techniques.
Keep MachPanel front-facing websites secure via SSL by trusted SSL providers.
Keep all your passwords safe and strong. Change your passwords periodically.
Use strong password policy for Active Directory and MachPanel logins.
Keep server clock in-sync
Harden Remote access to MachPanel Server.
Periodically review logs for suspicious activity
1. Authentications
2. User Access activity & changes
3. Privilege Elevation & usage
Maintain server logging, monitor periodically
1. Mirror logs to a separate log server
2. Scans/Audits of the server - check for malware/hacks
Backup Considerations:
1. Use regular VM snapshots, MachPanel database/application/file backups. Maintaining backup schedule and alerts.
2. Use Disaster Recovery (DR) and High-Availability (HA) safeguards
3. Periodically review and practice Recovery steps
4. Establish a periodic archive of your data to a remote site / data storage location

MachPanel Database Backup Removal

zohaib.shaikh — Wed, 26 Sep 2018 06:06:33 GMT

Summary

This article provides summary how to schedule MachPanel Database delete via Task scheduler.

Applies To

This article applies to MachPanel all build versions.

MachPanel Database Backup Removal

Database Backup can be taken using the configuration studio and based on setting "Keep Last ----- Backup.", the older file and database backups get removed automatically in case the Web and Database Server is on same server. In the case of having Database hosted on a different server, the removal of the old database backup files will need to be done using the execution of SQL script through scheduling a task using Windows built-in Task Scheduler. It is a one-time configuration process and the removal of old database files will be automated afterwards, based on the settings configured while scheduling the task.

There can be different ways to handle database backup removal within the Management studio / SQL Maintenance plans and outside of that via PS Scripts. Customers can use whatever method is easy to adopt. In case of SQL server agent job, it must be added to all SQL nodes involved in Custer / AG / mirroring etc.

Below is one way to schedule a task for auto removal of older backups.

Pre-Requisites before scheduling a task:

Any user with full administrative rights on folder (where script file is placed) and SQL server service, can configure this task. The windows default administrator account or one with similar rights should be used.
Open the script file using Notepad and make the required changes in the highlighted part i.e. Name of your Database and the How much previous backups you want to keep.

Please find the complete code in attachment.

When the above-mentioned prerequisites are verified the next step is to schedule the task using Task Scheduler on your SQL server. Navigate to Search and type “Task Scheduler”, right click on it and click “Run as Administrator” as shown below.

Below window will appear after you run the Task Scheduler.

Step -1: Click on Task Scheduler present in the Object Explorer present at left side of screen and select “Create Task” and the new task addition window will appear on your screen. In the Create Task window under the General tab you will have to provide Name of Task, description of task and the security options should be configured as shown below and click OK at the end:

Step-2: In the Triggers tab, click on ‘New’ to add trigger, a new window will appear by name “Edit Trigger” in which you will configure the desired settings related to trigger this task. You have to select date/time and also Enable the trigger at the end of window and click OK.

Step-3: In the Actions tab in which you will have to select the action for your task and under the settings Program/script you will have to look for SQLCMD.EXE in your SQL installation directory and select the EXE file. In the Actions tab, click on ‘New’ button and a new window will appear to add/edit the desired action.

Sample input is mentioned below, but the input should be according to your SQL installation details.

Program/Script:

"C:\Program Files (x86)\Microsoft SQL Server\Client SDK\ODBC\130\Tools\Binn\SQLCMD.EXE"
Next step is to add the arguments value and in this case the argument sample input should be like:
-S "MP-PSS-2016\MACHPANELSQL08R2" -i "C:\Program Files\MachSol\RemoveBackups.sql" -E
You have to enter based on your SQL installation.

Note: Values must be enclosed in double quotes.
-S = SQL server name\instance name (EDIT it accordingly)

It can be "AG Listener Name", "Cluster name" or "SQL Server Name / Instance Name". You can get the "Database Server" name from MachPanel Configuration Studio on MachPanel Server.

-i = Path for the script file to be executed through Task Scheduler. (File is attached with document)
-E = for trusted connection (no value expected) and click on OK.

Step-4: Next tab is the Conditions tab, which specifies the execution of task based on the conditions i.e. the task will not Run if any condition set here is not true.

Step-5: The next tab is the Settings tab in which you will have to specify the additional settings that will affect the behavior of the task as shown below and save the desired changes:

Step-6: The last one is the History tab which basically holds the history of the task when it is being executed through the Task Scheduler.

Attempt to update MachPanel failed. BACKUP DATABASE is terminating abnormally.

rehan_waseem — Fri, 29 May 2015 00:29:44 GMT

Summary

This article describes in detail about resolving error faced during automatic update via MachPanel Configuration Studio.

Applies To

MachPanel build 5.2.10 and above

Error Message

Error Occured. Details: Cannot open backup device 'c:\MachPanel_DbXXXX_YYYYMMDD.BAK'. Operating system error 5(Access is denied.).

BACKUP DATABASE is terminating abnormally.

In configuration studio looks like:

In Configuration Studio Logs the error looks like this:

Solution

The problem is being caused due to permissions / rights restrictions. Please create a new Folder on the SQL Server that hosts your MachPanel database for example “C:\MPDB-Backup” where you would like to create MachPanel database backup and assign “Write” permissions to “Users” group on this folder. After that provide this folder’s path in MachPanel Configuration studio as shown in snapshot below:

Please try updating the system again after above steps. This should resolve the issue.

Backup MachPanel Control and Remote Server

mudesira.munir — Thu, 30 Sep 2010 12:37:47 GMT

Summary

This article provides information about how to manually backup your MachPanel Control and Remote Servers.

Applies To

MachPanel all versions

Solution

Important Note: It is very important to take backup of following on regular intervals. It is very important to know version of the backed up database file, control server files and remote server files.

MachPanel Database
MachPanel Control Server
MachPanel Remote Server

Manual Backup

It is recommended to name the database backup files/Folders according to the current version of MachPanel. For example, backed up files must be placed under folder named (MP_Files_Backup_7220) and backed up database file must be saved as (MP_DB_Backup_7.2.20.bak)
Similarly take backup of the MachPanel Remote Files. For example, backed up files for Remote Server must be saved under the folder (MP_Remote_Files_Backup_7220)

Backup Intervals:

Database backup must be done daily. Again, it is necessary to know control panel version at the time of backup.
Daily backup of MachPanel files is not required. However you may back up before making any changes to MachPanel Files i.e. before performing updates on MachPanel.
Every time there is a version change. This way you will have files backed up on every version and restoration for our support department will be easy in case of any misfortune incident.

The backup details are explained below:

STEP 1: Backup MachPanel Control Server & Database:

In latest build i.e v7.2.35 and above, you can take backup of Control Panel and SQL database at specified locations and interval (Frequency & Time ).

Navigate to Configure Studio >> Software Backup.
You can Enable Auto-Backup option and change Backup frequency and the backup location as well. Also you can auto-purge backups by selecting Keep Last (Select numbers).
Backup Email Address: An email will be sent when backup is taken.
Apply required setting and click on "Update Settings" When you have to take a fresh backup click on "Take Backup now". See Image in attachment.

STEP 2: Backup MachPanel Remote Server:

Manual Backup:

Shut down the MachPanel Provisioning Service and also exit the Remote configuration studio. Make sure no instance to MachPanel Remote Configuration Studio is running under any user.
Copy all the files from this path: C:\Program Files\MachSol\MachPanel Remote Server\ and place them at another safe location as backup.
Backed up files for Remote Server must be saved under the folder (MP_Remote_Files_Backup_7220)

Backup Failed When Updating MachPanel Remote Server

zohaib.shaikh — Fri, 07 May 2010 09:41:36 GMT

This article provides information about how to successfully update MachPanel Remote Server if ''Backup Failed" error occurs during the update from configuration studio.

Applies To

MachPanel all versions.
Remote Configuration Studio.

Solution

To successfully update the remote server, please follow the steps mentioned below:

Step 1: Rename the Backup folder.

Go to My Computer.
Navigate to the folder where MachPanel Remote Server is installed. For example: C:\ProgramFiles\MachSol, Inc\
Then rename the Backup folder at the location C:\ProgramFiles\MachSol, Inc\Backup.
Run the update again.