Needing a Solution for Veeam Agent For Windows

[qtaalim]

Currently our Backup Server sits behind a different firewall than all of our workstations where Veeam Agent for Windows reside. The way our current infrastructure is architectured the workstations reside in the Trust Zone. In order for us to manage the workstations Veeam Agent for Windows we have to allow the Backup Server to communicate with the agent in the Trust which is a security concern. We are trying to find a solution that would put sometype of process in the DMZ and allow that to communicate to the Backup Server and the Agent. It would be the MITM. Have anyone developed a solution similar and got it working?

[Egor Yakovlev]

Have a separate VBR installation in DMZ zone to protect respectful infrastructure machines. That way you avoid security concerns while keeping data protected. San fabric(backup target) can span two zones and make DMZ backups accessible from second VBR server in case of complete DMZ loss.
Thanks!

[qtaalim]

So in my case case that would mean building 10 different VBR sites all tied back in the primary Back Server? Is there an extra charge for each VBR instance?

[Egor Yakovlev]

Backup servers would be unaware of eachother instances, giving you totally separated backup environments. There is no charge for Veeam Server installations. Do you actually have 10 isolated zones? Usually it's one internal net and one DMZ that might span several sites - in this case you just need 1 server for internal network and 1 for DMZ - Veeam solution architecture does have remote proxying components, so you don't need to install Server per site as long as networking allows us to communicate.
Thanks!