we have deployed a VSA with VBR 13, and added a secondary network adapter so we can redirect backup traffic by use of the preferred Networks option in Veeam VBR. We add a layer 2 subnet into this part of Veeam configuration.
This setup is intended to backup Windows servers, that also have a secondary network adapter, however if firewall restrictions are not setup on the windows firewall of the Windows Server for the secondary network adapter (worst case), you can connect to the VBR VSA over the layer 2 subnet.
How to solve this, is defining firewall rules for 100 Windows servers. My question is, if it is supported and allowed to change the inbound firewall rules on the VBR VSA. What would be the best practices and how to do this ?
It has never been tested so results are unpredictable. So the best course of actions would be to redeploy VSA with a secondary network adapter already installed. With this approach, you will be able to get help from our Customer Support in case of any issues.