About MSDP remote client data security
NetBackup supports encryption of data-in-transit to encrypt backup/restore data in connection traffic. See Encryption of data-in-transit in NetBackup Security and Encryption Guide.
If data-in-transit encryption (DTE) is not enabled, the NetBackup deduplication process can encrypt the data before it is transmitted over the WAN.
MSDP supports client direct restore. If the backup data is encrypted, the encrypted data is transferred to the client and is decrypted there.
For client direct restore, See Configuring MSDP restores directly to a client .
More Information