Procedure and thebest practice to secure the Veeam backup servers?

[Backup.Operator]

Folks,

I need some guidelines on how to secure and hardened the Windows Server VM that is running VBR server.
After enabling the Veeam Backup encryption and setting up the MFA/2FA, I wonder what's the catch or things to consider.

[Mildur]

Hello

Where does your Windows Server VM running? On the production hypervisor or do you have a dedicated backup hypervisor? Running VBR in a VM makes it really easy to take over the VM if you have access to the hypervisor console. Therefore this hypervisor must also be protected from any unauthorized access.

Our user guide provides hardening suggestions:
https://helpcenter.veeam.com/docs/backu ... kup-server

And we have our Best Practice guide:
https://bp.veeam.com/vbr/Security/

Best,
Fabian

[Backup.Operator]

Where does your Windows Server VM running?

Yes, it is on the same production hypervisor.

[Backup.Operator]

regarding the backup encryption, what are the caveats or the things to pay attention?
the SQL database has been migrated to the PostGRE SQL on the same VM as well.