Standalone backup agent for Microsoft Windows servers and workstations (formerly Veeam Endpoint Backup FREE)
Post Reply
hyvokar
Expert
Posts: 344
Liked: 21 times
Joined: Nov 21, 2014 10:05 pm
Contact:

Veeam agent and firewall

Post by hyvokar » Feb 05, 2019 3:26 pm

Hi,

We are trying to backup workstations to our VBR server.
We have problems configuring our workstation firewall to allow Veeam backup agent. The nasty part is, where the backup agent tries to connect itself.
All in- and outbound traffic are blocked, but those explicitly allowed.

Can we use our VBR server as a "cloud gateway", to allow more simplified configuration on firewalls?
Bed?! Beds for sleepy people! Lets get a kebab and go to a disco!
MS MCSA, MCITP, MCTS, MCP
VMWare VCP5-DCV
Veeam VMCE

DGrinev
Veeam Software
Posts: 1571
Liked: 184 times
Joined: Dec 01, 2016 3:49 pm
Full Name: Dmitry Grinev
Location: St.Petersburg
Contact:

Re: Veeam agent and firewall

Post by DGrinev » Feb 05, 2019 3:32 pm

Hi,

Yes, you can deploy the Cloud Gateway role on the Veeam backup server. Thanks!

hyvokar
Expert
Posts: 344
Liked: 21 times
Joined: Nov 21, 2014 10:05 pm
Contact:

Re: Veeam agent and firewall

Post by hyvokar » Feb 05, 2019 3:39 pm

Would this still be free for endpoits?
Bed?! Beds for sleepy people! Lets get a kebab and go to a disco!
MS MCSA, MCITP, MCTS, MCP
VMWare VCP5-DCV
Veeam VMCE

DGrinev
Veeam Software
Posts: 1571
Liked: 184 times
Joined: Dec 01, 2016 3:49 pm
Full Name: Dmitry Grinev
Location: St.Petersburg
Contact:

Re: Veeam agent and firewall

Post by DGrinev » Feb 05, 2019 3:56 pm

Nope, the option (target Veeam Cloud Connect Repository) is available in Workstation and Server editions of Veeam Agent for MS Windows. Thanks!

hyvokar
Expert
Posts: 344
Liked: 21 times
Joined: Nov 21, 2014 10:05 pm
Contact:

Re: Veeam agent and firewall

Post by hyvokar » Feb 06, 2019 9:45 am

Ok, that's not an option for us then.
Anyone had any luck with configuring firewall with Veeam Agent?
Bed?! Beds for sleepy people! Lets get a kebab and go to a disco!
MS MCSA, MCITP, MCTS, MCP
VMWare VCP5-DCV
Veeam VMCE

Dima P.
Product Manager
Posts: 9755
Liked: 771 times
Joined: Feb 04, 2013 2:07 pm
Full Name: Dmitry Popov
Location: Prague
Contact:

Re: Veeam agent and firewall

Post by Dima P. » Feb 06, 2019 11:50 am

hyvokar,

Is it possible to white list the required components in your firewall settings? Thanks!

hyvokar
Expert
Posts: 344
Liked: 21 times
Joined: Nov 21, 2014 10:05 pm
Contact:

Re: Veeam agent and firewall

Post by hyvokar » Feb 07, 2019 12:38 pm

Hi,

I must do that also, but the main problem is, that our firewall software doesnt have an option to use workstations own ip address.
We are getting our IP addresses from the dhcp server, let's say that we got an IP 192.168.1.34

Veeam agent then tries to connect 127.0.0.1 -> 192.168.1.34 using port 6183. This is problematic, since we cannot configure that 192.168.1.34 address since it's a) random b) different for every workstation. Best we can do is to use dhcp pool address space, but that is far from perfect, since people may want to use backup elsewhere using VPN connection.
Bed?! Beds for sleepy people! Lets get a kebab and go to a disco!
MS MCSA, MCITP, MCTS, MCP
VMWare VCP5-DCV
Veeam VMCE

Dima P.
Product Manager
Posts: 9755
Liked: 771 times
Joined: Feb 04, 2013 2:07 pm
Full Name: Dmitry Popov
Location: Prague
Contact:

Re: Veeam agent and firewall

Post by Dima P. » Feb 07, 2019 5:34 pm

hyvokar,

Can you white list the process that initiates the connection? Thanks!

hyvokar
Expert
Posts: 344
Liked: 21 times
Joined: Nov 21, 2014 10:05 pm
Contact:

Re: Veeam agent and firewall

Post by hyvokar » Feb 12, 2019 2:51 pm

DGrinev wrote:
Feb 05, 2019 3:32 pm
Yes, you can deploy the Cloud Gateway role on the Veeam backup server. Thanks!
I don't really get this. So we could install cloud gateway for endpoints, but we cannot use cloud gateway for virtual servers unless we purchase $175k worth of vmware licenses to get ELA status?
Bed?! Beds for sleepy people! Lets get a kebab and go to a disco!
MS MCSA, MCITP, MCTS, MCP
VMWare VCP5-DCV
Veeam VMCE

Dima P.
Product Manager
Posts: 9755
Liked: 771 times
Joined: Feb 04, 2013 2:07 pm
Full Name: Dmitry Popov
Location: Prague
Contact:

Re: Veeam agent and firewall

Post by Dima P. » Feb 12, 2019 3:09 pm

hyvokar,

This was posted by mistake. Cloud gateway is an infrastructure component of Veeam Cloud Connect solution. It acts as communication point for Cloud Connect and routes traffic between the tenant backup server and Cloud Connect repository. It's not available in regular Veeam B&R installation.

Post Reply

Who is online

Users browsing this forum: Google [Bot] and 7 guests