One of our customers is thinking of different ways of offering backup as a service to their customers, starting by doing it for themselves as an in-house DR solution. They are trying to work out which would be a better option, either a standard deployment or a VCSP setup.
What I’m still not sure of is whether it is best practice to use a VPN for a standard install where backup copy jobs traverse a WAN connection. The customer points out that since Veeam uses dynamic port ranges (e.g. 2500-5000 for some types of communication, 49152-65535 for others) port forwarding becomes a problem and he wants to know if VPN is used as a way around this.
Does anyone know how the port forwarding issue is addressed?