Cloud gateway nat or dual home?

[hatrick]

It is my understanding with the cloud gateway used for backups only that we can either place the gateway on a dmz and nat via our cisco firewall or we can dual home the gateway server with two interfaces with on being placed on out Internet segment and the other on the dmz. Because I do not like the server to be exposed even with the windows firewall and security suggestions that I would rather nat via the firewall and the server residing only on the dmz. My question is if we decide to offer replication and allow clients the fail over to the replicas via using the nea appliances in the future will the firewall nat for the gateway servers cause a problem? Thanks and let me know if you have further questions about our proposed configuration.

[dellock6]

Hi Mike,
have you looked at the Cloud Connect reference architecture? It has this and many other answers:

https://www.veeam.com/wp-cloud-connect- ... re-v9.html

Also, I see from our records you are an end user, not a service provider. May I ask what's the use case for you for Cloud Connect?

[hatrick]

I have looked at that and there is an example of the dual home but also a reference to an option for selecting NAT on the install. Behind a firewall would be more secure even though the exposure is minimal if the server is hardened. I was an end user but I am helping a friend that is a newly licenced service provider and am new to this setup.

[dellock6]

You can always have a firewall even without nat, just set the firewall to be the gateway of the subnet used by the external network, or use a L2 firewall.