Considerations and Limitations

Before you install Veeam Software Appliance, consider the following:

• Install Veeam Software Appliance on a dedicated empty machine that meets the system requirements. For more information, see System Requirements.
• Review the Known Issues section of the Veeam Backup & Replication Release Notes.
• Enterprise Manager on Linux is supported only with the Enterprise Plus edition license.
• You cannot install other backup infrastructure components on the machine where Enterprise Manager is installed. This includes the backup server, backup repository, proxy server and other components.

• Backup infrastructure components communicate over specific network ports. These ports must be open. For more information, see Ports.

• When you install Veeam Software Appliance, the Rocky Linux operating system, Veeam Backup Enterprise Manager and other Veeam Software Appliance components are installed with predefined settings, including volume partitioning and user account creation. After installation is complete, you need to proceed with the initial configuration of Veeam Software Appliance, which includes setting up host users, and configuring server time and network settings.

• Veeam Software Appliance uses DISA and FIPS-compliant Linux policies. These policies cannot be changed.
• Veeam Software Appliance is compliant with most DISA STIG requirements except for the following ones:

• V-258230 — RHEL 9 must enable FIPS mode.
• V-257816 — RHEL 9 must disable the use of user namespaces.

• V-270180 — The RHEL 9 fapolicy module must be configured to employ a deny-all, permit-by-exception policy to allow the execution of authorized software programs.
• V-258042 — RHEL 9 user account passwords must have a 60-day maximum password lifetime restriction.
• V-258054 — RHEL 9 must automatically lock an account when 3 unsuccessful logon attempts occur.
• V-257832 — RHEL 9 must not have the gssproxy package installed.
• V-257819 — RHEL 9 must ensure cryptographic verification of vendor software packages.
• V-257928 — All RHEL 9 world-writable directories must be owned by root, sys, bin, or an application user.
• V-257929 — A sticky bit must be set on all RHEL 9 public directories.
• V-257828 — RHEL 9 must not have the nfs-utils package installed.