Serving Enterprise Manager as a Web Page?

VEM is a webpage by default - if you use the icon on the desktop, it will bring up a web browser and load the page.  You can then see the required port for connecting to it and then just have that served to users over your WAN IPs.

​@Angelov - VEM is a website, so not sure what exactly you’re asking? Are you wanting to add your own cert instead of use the self-signed cert? Did you check the User Guide?

https://helpcenter.veeam.com/docs/vbr/em/updating_security_certificate.html?ver=13

https://helpcenter.veeam.com/docs/vbr/em/em_tls_internal_ca.html?ver=13

If this isn’t what you’re wanting, can you clarify more?

Thanks.

​@Angelov usually the VEM is only reachable from the internal LAN. The idea is not to expose it to the internet. So as long as you don´t have it in a DMZ that is exposed to the internet you should be able grant access from certain internal networks via firewall rules and network separation. 

Regards

Chalid

Personally I’d reach out to my networking team or Web dev’s to assist with this as it’s not really a “Veeam” issue, or setting.

Enterprise Manager is a webpage, but Veeam doesn’t know how every customer needs to access it.

We have many policies on our networks to allow specific VLANs to access specific servers, shares, websites etc.  When you install anything with a web GUI, it’s accessible to the VLANS that have access to that port by default.    You will either need to add firewall rules to grant access, or use restrictions to block it. Personally I feel most business use firewall rules for most of this.  

Being related to your Veeam environment, using firewall rules to block ALL access to the enterprise manager server is recommended to those who do not require access.  If you want users to be able to do restores, you should still block networks they will not be accessing it from, allowing only the required ports as well.