Appendix. Working in Private Environments

For Veeam Backup for Microsoft Azure to be able to work with Azure resources that operate in private environment, there is a list of configuration actions that must be performed both on the Veeam Backup for Azure and the client side.

Actions Performed by Veeam Backup for Microsoft Azure

Veeam Backup for Microsoft Azure will automatically configure network settings required:

• To allow secure communication between the backup appliance and storage accounts where Veeam applications and scripts are stored.

Veeam Backup for Microsoft Azure creates these accounts in Azure regions where workers are launched and protected VMs with VSS agents reside.

• To allow Azure Service Bus to transfer data between services in private virtual networks.  

Actions Performed by Client

To back up and restore Azure resources operating within private virtual networks (VNets), you must grant Veeam Backup for Microsoft Azure access to these resources. To do that, configure specific network settings to allow traffic from VNets to which the backup appliance and workers are connected to reach your resources. Depending on the Azure resource to which you want to grant access, do either of the following:

• Configure network settings for a storage account.
• Configure network settings for a SQL Server.
• Configure network settings for a SQL Managed Instance.