Creating Private Endpoints
If the backup appliance resides in another region than the SQL Server that you want to protect, or you do not want to add firewall rules, you can create private endpoints for your SQL Server to allow Veeam Backup for Microsoft Azure access to the databases. Private endpoints are network interfaces that use private IP addresses from your virtual network. For more information on private endpoints, see Microsoft Docs.
You must create a separate private endpoint for every VNet to which workers are connected. To create a private endpoint, complete the following steps: