UK’s trusted IT infrastructure partner since 2003
sales@servnetuk.com
0800 987 4111
Servnet
FinanceToolsConfiguratorGet in Touch
Cloud monitoring · decoy Veeam server · included with support

Object First Fleet Manager and Honeypot
See every site, and catch whoever is looking for Veeam

Two features sit around the storage itself. Fleet Manager watches every Ootbi cluster you own from one cloud dashboard without being able to touch the data. Honeypot turns each appliance into a tripwire for attackers hunting for your backup server.
Included[src]
WITH ACTIVE SUPPORT
Outbound[src]
ONLY, NO VPN
Entra ID[src]
FLEET MANAGER SIGN-IN
5 clicks[src]
TO ENABLE HONEYPOT
v1.7[src]
RELEASE THAT ADDED HONEYPOT
SIEM[src]
ALERTS OVER SYSLOG
Fleet Manager

What Object First Fleet Manager and Honeypot each do

Object First Fleet Manager and Honeypot solve different problems: Fleet Manager is a cloud service that monitors distributed Object First deployments[src], while Honeypot is a detection feature inside each appliance[src].

Fleet Manager gives one dashboard for storage utilisation and hardware health across clusters, alerts for outages, overages and threats, and access that can be delegated to different tenants[src]. Object First built it as a Zero Access SaaS: outbound-only connectivity, no VPN, sign-in through Microsoft Entra ID, and no destructive actions possible[src]. It is free to every customer with an active support plan[src].

Fleet Manager compared with the local Cluster ManagerFleet Manager uses telemetry only; backup data stays on the appliance.Fleet ManagerCluster ManagerScopeEvery enrolled clusterOne clusterMonitoringWhole fleet, one dashboardLocal usage and healthAccess controlDelegate views to tenantsRoles for one clusterAlertsAll clusters and devicesDevices in the clusterStorage managementNo access to backup dataS3 keys and bucketsFleet Manager uses telemetry only; backup data stays on the appliance.
Object First's own comparison of Fleet Manager with the Cluster Manager on each appliance. The last row is the security boundary: storage management stays local, and Fleet Manager cannot create, alter or view backup data.
Service providers

Many clients, one dashboard, separate access

Object First's Fleet Manager white paper is written as much for service providers as for IT teams: role-based access with isolation between tenants, and a dashboard covering consumption and support contracts[src].
Client Ootbi clusters reporting to one Fleet Manager tenantThe provider still runs Veeam for each client; Fleet Manager adds visibility, not control of the data.Client A: accountancy firmOotbi Mini, 16 TBClient B: school trust2 × Ootbi 72 TBClient C: manufacturer4 × Ootbi 432 TBProvider’s own DR siteOotbi 216 TBOutbound telemetry, no VPNFleet ManagerClients delegate access to theproviderRole-based access, tenants isolatedAlerts for outages, overages andthreatsThe provider still runs Veeam for each client; Fleet Manager adds visibility, not control of the data.
An example provider estate. Each client owns its cluster and delegates access to the provider; Object First moderates each delegation request and the provider must accept it, and the client can revoke it at any time. Nobody in Fleet Manager can reach the data[src][src]. Client names are illustrative.

Registration with Fleet Manager arrived in Ootbi release 1.7.78, which also added SNMP metrics and SNMP traps with filtering by severity or event ID, for teams that want Ootbi in an existing monitoring platform[src].

Honeypot

A decoy Veeam server on every appliance

Attackers look for the backup server early, because surviving backups mean no ransom. Object First's Honeypot exploits that: it mimics a Veeam Backup & Replication server so that anyone probing for one sets off an alert[src].

Honeypot runs as an isolated virtual machine inside the Object First cluster, imitating Veeam Backup & Replication and a remote management service, and is based on Marco Escobar's open-source veeam-decoy project on VeeamHub[src]. It watches for repeated login attempts, port scans, probing of sensitive protocols and unauthorised Veeam console access[src]. Turning it on is Settings, Security, Honeypot in the Cluster Manager, with a DHCP or static address[src].

Object First Honeypot from probe to alertThe decoy has no path to the storage; it exists to be found.ATTACKERScans the networklooking for VeeamTries a loginSSH or the consoleDECOYFake Veeam B&Rserverisolated VM on OotbiEvery attemptrefusedand recordedALERTObject FirstdashboardEmailSyslog to your SIEMYOUInvestigate earlybefore backups aretargetedThe decoy has no path to the storage; it exists to be found.
How a Honeypot alert is raised, from Object First's Honeypot guide and release notes. The decoy sits on a segmented part of the appliance; Object First says penetration testing found it adds no risk to the cluster or the immutable data[src].

A tripwire only helps if someone is watching it. Route the syslog feed into whatever your security team already monitors, and test it: Object First's guide suggests trying an SSH login and running an authorised scanner such as Zenmap against the decoy to see the alert fire[src].

In practice

Getting value from both

Cost

Included with support

Fleet Manager and Honeypot are available to every customer under an active support agreement at no extra cost[src].
Telemetry

Leave it switched on

Telemetry lets Object First support act on log data before you raise a ticket[src], and Consumption appliances require it[src].
Demo

Not in demo environments

Object First notes Honeypot is not available in its VSA demo environments, so test it on a real appliance[src].
Branches

Pair with Ootbi Mini

Small sites without IT staff are where central monitoring pays most. Ootbi Mini for branches →
Supply & quote

Plan a monitored, multi-site Ootbi estate

  • We size each site’s appliance and plan which ones replicate to which.
  • We set up Fleet Manager enrolment and Honeypot alerting into your monitoring.
  • We check outbound access and switch ports at every site.
  • We quote appliances and Object First support together.

Get an Ootbi quote

Tell us how much Veeam protects and how long backups must stay locked. We size the appliance or cluster and quote it.

Business enquiries only — please use your company email. Gmail, Hotmail and other personal addresses are not accepted.

We only ship hardware to the countries in the dropdown. Software and maintenance services are global.

We use these details to reply to your enquiry and prepare any quote. No marketing emails without your consent. Privacy Policy

No obligation · response within 4 business hours

FAQs

Fleet Manager and Honeypot: common questions

What is Object First Fleet Manager?

A cloud-hosted service from Object First that monitors distributed Ootbi deployments from one dashboard: storage utilisation, hardware health and alerts for every enrolled cluster, with multi-tenant access controls. It is aimed at organisations with several sites and at service providers running Ootbi for clients.

Does Fleet Manager cost extra?

No. Object First says Fleet Manager is available to all customers with an active support agreement at no additional cost. The same is true of Honeypot.

Can Fleet Manager read or delete backups?

No. Object First states that Fleet Manager does not have access to create, alter or view backup data, uses telemetry only, and allows no destructive actions. Creating S3 keys and buckets stays in each cluster’s local Cluster Manager.

Does Fleet Manager need a VPN or an inbound firewall rule?

No. Object First describes it as needing no VPN and using outbound-only connectivity from the appliances, with sign-in through Microsoft Entra ID. Each Ootbi already uses outbound HTTPS on port 443 for updates, support and telemetry.

What is the Object First Honeypot?

A decoy built into every Object First appliance. It runs as an isolated virtual machine in the cluster that imitates a Veeam Backup & Replication server and remote management service, so anyone scanning the network for Veeam finds it. Login attempts, port scans, probing of sensitive protocols and attempts at Veeam console access raise an alert. Object First says it is based on the open-source veeam-decoy project from VeeamHub.

How do I turn Honeypot on, and where do alerts go?

In the Cluster Manager web interface go to Settings, Security, Honeypot, tick Enable, choose DHCP or a static IP and apply: Object First counts it as five clicks. Alerts appear in the Object First dashboard and can be sent by email or forwarded over syslog to a SIEM.

Can the Honeypot be used to attack the backups?

Object First says third-party penetration testing found Honeypot introduces no additional risk to the cluster or the immutable data, and that the feature is logically isolated, so the storage environment stays inaccessible to whoever reaches the decoy.

The Object First range

More Object First pages

Keep exploring

Related Servnet guides, tools and hardware

Sources

Every specification on this page comes from Object First's own datasheets, product pages and Help Center, and every statement about how Veeam behaves comes from Veeam's own documentation, listed below with their dates. Where Object First's web copy and a datasheet differ, we use the datasheet. Figures are confirmed against the current revision when we quote.

  1. Object First Fleet Manager · web page, read 30 Oct 2026
  2. Fleet Manager: Unified Fleet Operations white paper (1.0_20260414) · PDF dated 5 May 2026
  3. Object First Honeypot · web page, read 30 Oct 2026
  4. Early Threat Detection for Veeam Backups: Object First Honeypot guide · PDF dated 8 Jan 2026
  5. Object First Help Center 1.7: Release notes · latest entry 1.7.99.15600, 1 Sep 2026
  6. Object First product overview · web page, read 30 Oct 2026
  7. Pre-Requisites Checklist to Achieve Box-to-Backup in 15 Minutes · PDF dated 28 Dec 2023
  8. CapEx and Consumption Acquisition Models for Ootbi · web page, read 30 Oct 2026

Object First, Ootbi and Simply Resilient are trademarks of Object First; Veeam is a trademark of Veeam Software, which acquired Object First in January 2026. Servnet is an independent UK IT reseller; this page is our own guide to the range.

Talk to a UK specialist

Get expert advice or a no-obligation quote — servers, storage, networking, maintenance, finance and cloud. We reply the same working day.

or call 0800 987 4111