Important note about SSL VPN compatibility for 20.0 MR1 with EoL SFOS versions and UTM9 OS. Learn more in the release notes.

Thread Info
  • State Verified Answer
  • +1 person also asked this people also asked this
  • Replies 7 replies
  • Subscribers 40 subscribers
  • Views 833 views
  • Users 0 members are here
Options
Suggested

Problems with Veeam B+R 12.1 and SFOS 20.0.2 MR-2-Build378 - failed to create NFC download stream

Peter Riederer

Hey Folks,

we rolled out a XGS126 in our Branch yesterday (before SG125) and we cannot get Veeam to work backing up our Branch VMs.
The Branch is connected via IPSEC VPN Tunnel to our Datacenter (Sophos SG310). I already found the older thread Veeam B&R 12 issue - Discussions - Sophos Firewall - Sophos Community  but nothing works, and Veeam backup still fails -> always gets stucked at "Getting VM info from vSphere" -> NFC storage connection is unavailable ..... Failed to create NFC download stream....

Things done so far:

Checking the Logs -> IPS, ATR, ZDP no entries

Disabled, IPS, MDR threat feeds, and x-ops threat feeds (ATP) - no luck

set ips ac_atp exception fwrules 5 -> no luck (FW Rule of Backupserver to ESX Server) 

created a SSL/TLS inspection rule to exclude -> Source VPN Backupserver to LAN ESX Server, with Don't decrypt and max compatibility - no luck

added local.domain and FQDN of Backupserver and ESX server to Local TLS exclusion list - no luck

at the moment i am out of ideas, hence any other help would be very much appreciated.

Thanks.

Peter



Added TAGs
[edited by: Erick Jan at 9:35 AM (GMT -7) on 14 Aug 2024]
Parents Reply
  • 0 in reply to LHerzog

    the ipsec tunnel setup and fw-rules is the same as on the sg125 and traffic from backup server and vcenter server network to branch esx server network is not restricted. 

    disabled network traffic encryption in veeam completely but doesnt help either.

    sometimes in firewall i got some  "could not associate packet to any connection"

    but this is strange, because entries before and after that are the same and matching correctly

Children
No Data
Unfiltered HTML