Standalone backup agent for Microsoft Windows servers and workstations (formerly Veeam Endpoint Backup FREE)
Post Reply
m.novelli
Veeam ProPartner
Posts: 566
Liked: 103 times
Joined: Dec 29, 2009 12:48 pm
Full Name: Marco Novelli
Location: Asti - Italy
Contact:

Block Veeam Agent over WAN

Post by m.novelli »

Hi guys, I have some customers with multiple sites connected by WAN (sometimes 10 Mbit, sometimes 30 Mbit)

Is there a way to block Veeam Agent backups on notebooks when users travel across sites, so that the WAN is not overloaded? The backups repository sometimes is a Veeam Backup Server and sometimes just a network share on a NAS

Thanks!
Dima P.
Product Manager
Posts: 14726
Liked: 1706 times
Joined: Feb 04, 2013 2:07 pm
Full Name: Dmitry Popov
Location: Prague
Contact:

Re: Block Veeam Agent over WAN

Post by Dima P. »

Hello Marco,

Veeam Agent for Windows does not provide network management options. However, if users run Windows 10 they can use 'disable backup over metered connections' option and set WAN networks as metered in Windows. Thanks.
wayne7215
Influencer
Posts: 23
Liked: 7 times
Joined: Oct 07, 2016 8:37 am
Location: Switzerland
Contact:

[MERGED] Feature Request - No backup through WAN

Post by wayne7215 »

Something we would like to see is the possibility to disable backups over WAN. We use the backup job with "When backup target is connected" and always when a travelling user connects by VPN, the Veeam Agent for Windows starts it's backup job through VPN and during this time the computer is almost unusable because of the slow VPN connection and Veeam is running.
DGrinev
Veteran
Posts: 1943
Liked: 247 times
Joined: Dec 01, 2016 3:49 pm
Full Name: Dmitry Grinev
Location: St.Petersburg
Contact:

Re: Feature Request - No backup through WAN

Post by DGrinev »

Hi Wayne,

Thank you for the feature request!
Your topic was merged with the similar request. Thanks!
m.novelli
Veeam ProPartner
Posts: 566
Liked: 103 times
Joined: Dec 29, 2009 12:48 pm
Full Name: Marco Novelli
Location: Asti - Italy
Contact:

Re: Block Veeam Agent over WAN

Post by m.novelli »

Hi guys, this is a really important feature request. Basically Veeam Agent could check if he is in the same subnet as Backup Repository to detect if we are in a LAN or WAN scenario

Marco
zx.savage
Novice
Posts: 9
Liked: 3 times
Joined: Jan 19, 2018 10:15 am
Full Name: Dmitriy
Contact:

Re: Block Veeam Agent over WAN

Post by zx.savage » 1 person likes this post

Hello!
Confirm this is very important feature.

I have the same issue, but over VPN.
For me the best solution is add to Agent policy in B&R setting - backup only if agent network is x.x.x.x (office workstations network).

Thanks.
ToniVR
Influencer
Posts: 20
Liked: 4 times
Joined: Aug 17, 2012 3:50 pm
Full Name: Toni Van Remortel
Contact:

Re: Block Veeam Agent over WAN

Post by ToniVR » 1 person likes this post

We currently block the backups of the client VPN with a firewall rule.

But we would like to see an option so that the end user can say "I'm in a hotel tonight so my backup can run over the VPN".
It is nice to have a managed agent, but the end user should be able to control when backups can run or not when outside the office.
Dima P.
Product Manager
Posts: 14726
Liked: 1706 times
Joined: Feb 04, 2013 2:07 pm
Full Name: Dmitry Popov
Location: Prague
Contact:

Re: Block Veeam Agent over WAN

Post by Dima P. »

Hi folks,

Improvements in this field are planned for the next major version. Cheers!
m.novelli
Veeam ProPartner
Posts: 566
Liked: 103 times
Joined: Dec 29, 2009 12:48 pm
Full Name: Marco Novelli
Location: Asti - Italy
Contact:

Re: Block Veeam Agent over WAN

Post by m.novelli »

WOHA!
m.novelli
Veeam ProPartner
Posts: 566
Liked: 103 times
Joined: Dec 29, 2009 12:48 pm
Full Name: Marco Novelli
Location: Asti - Italy
Contact:

Re: Block Veeam Agent over WAN

Post by m.novelli »

Hi guys, I really need to block Veeam Agent over WAN... there is any port that I can close over VPN between sites?

Thanks
Dima P.
Product Manager
Posts: 14726
Liked: 1706 times
Joined: Feb 04, 2013 2:07 pm
Full Name: Dmitry Popov
Location: Prague
Contact:

Re: Block Veeam Agent over WAN

Post by Dima P. »

Marco,

For this version the only way is to mark the network you are using as metered and use disabled backup over metered connection option.
ejenner
Veteran
Posts: 636
Liked: 100 times
Joined: Mar 23, 2018 4:43 pm
Full Name: EJ
Location: London
Contact:

Re: Block Veeam Agent over WAN

Post by ejenner » 2 people like this post

FYI... Veeam should add their ports to the reserved ports list. https://www.iana.org/assignments/servic ... bers.xhtml

I guess you could check a Veeam laptop backup using wireshark to see what port it is transmitting on and block that on your VPN.
m.novelli
Veeam ProPartner
Posts: 566
Liked: 103 times
Joined: Dec 29, 2009 12:48 pm
Full Name: Marco Novelli
Location: Asti - Italy
Contact:

Re: Block Veeam Agent over WAN

Post by m.novelli »

Would be great!
Post Reply

Who is online

Users browsing this forum: Semrush [Bot] and 40 guests