Appendix. Working in Private Environments

For Veeam Backup for Microsoft Azure to be able to work with Azure resources that operate in private environment, there is a list of configuration actions that must be performed both on the Veeam Backup for Microsoft Azure and the client side.

Actions Performed by Veeam Backup for Microsoft Azure

Veeam Backup for Microsoft Azure will automatically configure network settings required:

  • To allow secure communication between the backup appliance and storage accounts where Veeam applications and scripts are stored.

Veeam Backup for Microsoft Azure creates these accounts in Azure regions where worker instances are launched and protected VMs with VSS agents reside.

  • To allow Azure Service Bus to transfer data between services in private virtual networks.


To let Veeam Backup for Microsoft Azure perform tasks in private environments, Azure Service Bus must be upgraded to the Premium tier. For more information on Azure Service Bus tiers, see Microsoft Docs.

Actions Performed by Client


This section provides instructions on steps performed in a third-party application. Keep in mind that the instructions may become outdated. For up-to-date instructions, see Microsoft Docs.

To back up and restore Azure resources operating within private virtual networks (VNets), you must grant Veeam Backup for Microsoft Azure access to these resources. To do that, configure specific network settings to allow traffic from VNets to which the backup appliance and worker instances are connected to reach your resources. Depending on the Azure resource to which you want to grant access, do either of the following: