Veeam agent and firewall

[hyvokar]

Hi,

We are trying to backup workstations to our VBR server.
We have problems configuring our workstation firewall to allow Veeam backup agent. The nasty part is, where the backup agent tries to connect itself.
All in- and outbound traffic are blocked, but those explicitly allowed.

Can we use our VBR server as a "cloud gateway", to allow more simplified configuration on firewalls?

[DGrinev]

Hi,

Yes, you can deploy the Cloud Gateway role on the Veeam backup server. Thanks!

[hyvokar]

Would this still be free for endpoits?

[DGrinev]

Nope, the option (target Veeam Cloud Connect Repository) is available in Workstation and Server editions of Veeam Agent for MS Windows. Thanks!

[hyvokar]

Ok, that's not an option for us then.
Anyone had any luck with configuring firewall with Veeam Agent?

[Dima P.]

hyvokar,

Is it possible to white list the required components in your firewall settings? Thanks!

[hyvokar]

Hi,

I must do that also, but the main problem is, that our firewall software doesnt have an option to use workstations own ip address.
We are getting our IP addresses from the dhcp server, let's say that we got an IP 192.168.1.34

Veeam agent then tries to connect 127.0.0.1 -> 192.168.1.34 using port 6183. This is problematic, since we cannot configure that 192.168.1.34 address since it's a) random b) different for every workstation. Best we can do is to use dhcp pool address space, but that is far from perfect, since people may want to use backup elsewhere using VPN connection.

[Dima P.]

hyvokar,

Can you white list the process that initiates the connection? Thanks!

[hyvokar]

Yes, you can deploy the Cloud Gateway role on the Veeam backup server. Thanks!

I don't really get this. So we could install cloud gateway for endpoints, but we cannot use cloud gateway for virtual servers unless we purchase $175k worth of vmware licenses to get ELA status?

[Dima P.]

hyvokar,

This was posted by mistake. Cloud gateway is an infrastructure component of Veeam Cloud Connect solution. It acts as communication point for Cloud Connect and routes traffic between the tenant backup server and Cloud Connect repository. It's not available in regular Veeam B&R installation.