Veeam Agent V6 and V13 - Encrypted in Transit?

[mike.anderson]

Hi All,

I have a customer that is asking about Veeam Agent data being encrypted in transit. I've looked through the Veeam guides for Agent, and this forum and can't find much beyond a single post from 2015 saying if it was going to a Veeam repo the data would be encrypted in transit.

This client is using v6 and v13 agents to go to Veeam Cloud Connect mostly.

I found this page in the agent guide that talks about using TLS to validate the thumbprint, although it doesn't specify which version of TLS:
https://helpcenter.veeam.com/docs/agent ... tml?ver=13

It also mentions how to encrypt the data at rest, but not in transit.

Here the Cloud Connect guide reinforces this:
https://helpcenter.veeam.com/docs/vbr/c ... tml?ver=13

Is there anywhere where it states that agent backups are encrypted in transit and what scenarios it might be encrypted? Also, what encryption protocol does it use?

Thanks in advance!
Michael Anderson

[chris.arceneaux]

Hi Mike,

Backup data sent to Cloud Connect is encrypted in transit by default. That is mentioned in one of the links you posted here:

By default, Veeam Backup & Replication encrypts data traffic going to and from the cloud repository.

TLS encrypted traffic is leveraged for communication between the Veeam Agent and the cloud repository. That process is described in detail here:

https://helpcenter.veeam.com/docs/vbr/cloud/cloud_connect_ssl_handshake.html

Here's additional reference material highlighting supported cipher suites and protocols including TLS versions:

https://helpcenter.veeam.com/docs/vbr/userguide/communications_encryption.html

Hope this helps!
Chris