Standalone backup agent for Microsoft Windows servers and workstations (formerly Veeam Endpoint Backup FREE)
Post Reply
hyvokar
Veteran
Posts: 406
Liked: 29 times
Joined: Nov 21, 2014 10:05 pm
Contact:

Veeam agent and firewall

Post by hyvokar »

Hi,

We are trying to backup workstations to our VBR server.
We have problems configuring our workstation firewall to allow Veeam backup agent. The nasty part is, where the backup agent tries to connect itself.
All in- and outbound traffic are blocked, but those explicitly allowed.

Can we use our VBR server as a "cloud gateway", to allow more simplified configuration on firewalls?
Bed?! Beds for sleepy people! Lets get a kebab and go to a disco!
MS MCSA, MCITP, MCTS, MCP
VMWare VCP5-DCV
Veeam VMCE
DGrinev
Veteran
Posts: 1943
Liked: 247 times
Joined: Dec 01, 2016 3:49 pm
Full Name: Dmitry Grinev
Location: St.Petersburg
Contact:

Re: Veeam agent and firewall

Post by DGrinev »

Hi,

Yes, you can deploy the Cloud Gateway role on the Veeam backup server. Thanks!
hyvokar
Veteran
Posts: 406
Liked: 29 times
Joined: Nov 21, 2014 10:05 pm
Contact:

Re: Veeam agent and firewall

Post by hyvokar »

Would this still be free for endpoits?
Bed?! Beds for sleepy people! Lets get a kebab and go to a disco!
MS MCSA, MCITP, MCTS, MCP
VMWare VCP5-DCV
Veeam VMCE
DGrinev
Veteran
Posts: 1943
Liked: 247 times
Joined: Dec 01, 2016 3:49 pm
Full Name: Dmitry Grinev
Location: St.Petersburg
Contact:

Re: Veeam agent and firewall

Post by DGrinev »

Nope, the option (target Veeam Cloud Connect Repository) is available in Workstation and Server editions of Veeam Agent for MS Windows. Thanks!
hyvokar
Veteran
Posts: 406
Liked: 29 times
Joined: Nov 21, 2014 10:05 pm
Contact:

Re: Veeam agent and firewall

Post by hyvokar »

Ok, that's not an option for us then.
Anyone had any luck with configuring firewall with Veeam Agent?
Bed?! Beds for sleepy people! Lets get a kebab and go to a disco!
MS MCSA, MCITP, MCTS, MCP
VMWare VCP5-DCV
Veeam VMCE
Dima P.
Product Manager
Posts: 14396
Liked: 1568 times
Joined: Feb 04, 2013 2:07 pm
Full Name: Dmitry Popov
Location: Prague
Contact:

Re: Veeam agent and firewall

Post by Dima P. »

hyvokar,

Is it possible to white list the required components in your firewall settings? Thanks!
hyvokar
Veteran
Posts: 406
Liked: 29 times
Joined: Nov 21, 2014 10:05 pm
Contact:

Re: Veeam agent and firewall

Post by hyvokar »

Hi,

I must do that also, but the main problem is, that our firewall software doesnt have an option to use workstations own ip address.
We are getting our IP addresses from the dhcp server, let's say that we got an IP 192.168.1.34

Veeam agent then tries to connect 127.0.0.1 -> 192.168.1.34 using port 6183. This is problematic, since we cannot configure that 192.168.1.34 address since it's a) random b) different for every workstation. Best we can do is to use dhcp pool address space, but that is far from perfect, since people may want to use backup elsewhere using VPN connection.
Bed?! Beds for sleepy people! Lets get a kebab and go to a disco!
MS MCSA, MCITP, MCTS, MCP
VMWare VCP5-DCV
Veeam VMCE
Dima P.
Product Manager
Posts: 14396
Liked: 1568 times
Joined: Feb 04, 2013 2:07 pm
Full Name: Dmitry Popov
Location: Prague
Contact:

Re: Veeam agent and firewall

Post by Dima P. »

hyvokar,

Can you white list the process that initiates the connection? Thanks!
hyvokar
Veteran
Posts: 406
Liked: 29 times
Joined: Nov 21, 2014 10:05 pm
Contact:

Re: Veeam agent and firewall

Post by hyvokar »

DGrinev wrote: Feb 05, 2019 3:32 pm Yes, you can deploy the Cloud Gateway role on the Veeam backup server. Thanks!
I don't really get this. So we could install cloud gateway for endpoints, but we cannot use cloud gateway for virtual servers unless we purchase $175k worth of vmware licenses to get ELA status?
Bed?! Beds for sleepy people! Lets get a kebab and go to a disco!
MS MCSA, MCITP, MCTS, MCP
VMWare VCP5-DCV
Veeam VMCE
Dima P.
Product Manager
Posts: 14396
Liked: 1568 times
Joined: Feb 04, 2013 2:07 pm
Full Name: Dmitry Popov
Location: Prague
Contact:

Re: Veeam agent and firewall

Post by Dima P. »

hyvokar,

This was posted by mistake. Cloud gateway is an infrastructure component of Veeam Cloud Connect solution. It acts as communication point for Cloud Connect and routes traffic between the tenant backup server and Cloud Connect repository. It's not available in regular Veeam B&R installation.
Post Reply

Who is online

Users browsing this forum: No registered users and 30 guests