[*]Veeam Enterprise (not Plus)
[*]Local backup server with 40TB DAS
[*]DR Site with SAN, connected via a 200mbps dedicated connection with WAN accelerator already installed.
Encrypting the data for the local disks is no problem, so let's just assume I've already set that up.
If using a backup job without encryption specified, Veeam will unencrypt the data before sending it to my DR site. My WAN accelerator will still be able to dedupe the data, and the IPsec tunnel will ensure safe passage. However, on the other end, the data will remain unencrypted at rest.
If using a backup job with encryption specified, Veeam will unencrypt the data before sending it to my DR site. It will then re-encrypt the data before flight. My WAN accelerator will not be able to dedupe the data, and the IPsec tunnel would be redundant. On the other end, the data will be encrypted at rest.
What I'd like is a setup similar to how Veeam handles transmitting data via the build-in WAN accelerator:
Is there any way for me to achieve this setup? Basically, I just want Veeam to encrypt my data at the target repository instead of at the source. There must be many others with WAN accelerators already in place that would also like to use the new encryption functionality in v8.3. Data blocks are passed to the target backup repository in the unencrypted format.
4. Received data blocks are encrypted on the target site and stored to a resulting backup file on
the target backup repository.