Veeam agent - Communication

[JanSt]

Hello,

I would like to ask for some advice as I am a bit lost and might have misunderstood the best practices for backing up endpoints using Veeam Agent.

My goal is to back up approximately 50 endpoints that are isolated from the public network, and I am unsure how to approach this scenario. I would like this to be centrally managed rather than standalone.

At the same time, I want to ensure that there is no direct communication from the endpoints to the backup server. Ideally, the backup server and its storage would remain completely isolated as they are now. Is it possible to deploy something in the VLAN where the endpoints are located, allowing the endpoints to communicate with the backup server indirectly?

Currently, we are using a backup server with storage on the same machine, along with an additional immutable storage solution. Initially, I thought about deploying a proxy in the VLAN to facilitate communication with the backup server. However, I read somewhere that this functionality might not be supported for Veeam Agent management.

I would greatly appreciate any suggestions, recommendations, or guidance on how to best approach this scenario.

Thank you very much in advance for your help.

Best regards,
Jan

[DanielJ]

I don't think there is any way around the fact that the agents need direct communication with both the backup server and repository (or its gateway, which can be the backup server). In similar situations I have deployed a separate VBR server in the same network as the agents, to minimize outside traffic to/from the agents.

[JanSt]

Hello,

Oh Okay. I am sorry to hear that. I expected little more in this way. Thank you for reply!

Best Regards,
Jan

[DanielJ]

It would be great if a server could be assigned as "agent proxy" for situations like this. See it as a feature request from everyone who must handle agents in locked-down environments.