Move Veeam backup setup to private network

[staun]

I am thinking of moving my entire backup setup to an private network where only my backup servers etc. are located, then prevent access to this network and only open the required ports according to Veeam (https://helpcenter.veeam.com/docs/backu ... l?ver=95u4)

would this be good idea to secure my backup just a bit more in case of any kind of attack (besides the 3-2-1 rule) or does it not make any sense doing this?

[oleg.feoktistov]

Hi Jorgen,

In general, it is a good practice to isolate backup infrastructure components and allow traffic through specific ports to ensure data protection.
Please, have a look at our security considerations article. Furthermore, you may want to encrypt transferred data within your networks.
Finally, I would also advise to consider scenarios with infrastructure segmentation by zones.

Kind regards,
Oleg

[staun]

Nice articles, actually read 1 of them, but the infrastructure segmentation is just what I needed to be sure I was headed the right direction.

Thnx