Configuring Network Settings for SQL Server
To allow Veeam Backup for Microsoft Azure to back up SQL Servers operating in private environment, you can either add firewall rules that will grant access to specific VNets, or create private endpoints that will be used to connect to the resources.
Firewall rules are applied only for VNets that are created in the same region or in paired regions. That is why if the backup appliance and the SQL Server are residing in different regions that are not paired, you must create private endpoints to securely connect to resources that you want to protect. For more information on paired Azure regions, see Microsoft Docs.