Host to proxy traffic encryption fail to enable

[ajulio]

Hello,
I've a server with the error on Security & compliance that "Host to proxy traffic encryption should be enabled for the Network transport mode" has "Not implemented" status.
If I try to enable with the automatic script fails.
I've also check and the encryption is enable in network traffic rules.

Is this a false positive and I just should suppress the alarm, or is any other place where I should enable the encryption?

[david.domask]

Hi Antonio,

Thanks for the report and sorry to hear of the challenges.

Just to confirm, I understand you used the hardening script and confirmed the checkbox manually, but to avoid doubt, the setting you checked was on this page on step 4?

https://helpcenter.veeam.com/docs/backu ... ml?ver=120

In the Options section of the Transport Mode window, specify additional options for the selected transport mode

Just want to confirm it's checking the same spot.

Similarly, can you run the following command from Powershell on the Veeam server itself? (Menu > Console > Powershell)

Get-VBRViProxy | Where-Object {$_.UseSSL -ne $True}

Please share the text output (remember to edit out sensitive information such as hostnames or IP addresses)

[ajulio]

Thank you David,
With you tip I found that encryption still to be enable in NBDSSL check box.

[david.domask]

Wonderful, glad I could help point this out. Is the Security and Compliance Analyzer showing success for this test now?

Regarding the script, I suspect we have a small bug in the script based on your testing, I will follow up on this internally and share the results.

[ajulio]

Yes, the Security & Compliance its all success.
I've used the script in other 13 servers with success, only one gives the error.

Thanks

[perseusco]

Hi,
May I know how to obtain this script?

thanks

[david.domask]

Hi Perseus,

Sure, we have this in a KB article here: https://www.veeam.com/kb4525