Veeam block Vcenter Single Sign-On

[bcampbell]

Has anyone had any experience blocking the Veaam server and repository for accessing the Vcenter SSO from a browser? We have some compliance restrictions that require us to block interactive remote login to the vcenter server while still allowing access for backups.

We currently accomplish this with a seperate PSC server. as 443 is blocked to that server. But we are moving to a PSC built in appliance.

I was curious if anyone had ran into this or had any ideas. With port 443 needed for authentication i'm not entirely sure its even possible to block interactive logins from a browser but still allow the veeam server to authenticate for backups.

Thanks

[PetrM]

Hello Bryan,

Basically, I'd stick to vCenter server security best practices and restrict network access only from nodes which do not host applications responsible for business-critical tasks like backup or monitoring. Also, I assume that it would be possible to add an exception in your security rule for an account which has administrative permissions on vCenter?

Thanks!