Configuring Network Settings for Storage Accounts
To allow Veeam Backup for Microsoft Azure to create and manage backup repositories, and to back up unmanaged Azure VMs and file shares, in a storage account where your resources reside, you can either add firewall rules that will grant access to specific VNets, or create private endpoints that will be used to connect to the resources.
Firewall rules are applied only for VNets that are created in the same region or in paired regions. That is why if the backup appliance and the storage account are residing in different regions that are not paired, you must create private endpoints to securely connect to resources that you want to protect. For more information on paired Azure regions, see Microsoft Docs.