About MSDP remote client data security

Resilient connection traffic is not encrypted. The NetBackup deduplication process can encrypt the data before it is transmitted over the WAN. Veritas recommends that you use the deduplication encryption to protect your data during your remote client backups.

NetBackup does not encrypt the data during a restore job. Therefore, Veritas recommends that you restore data to the original remote client over a private network.

See How MSDP restores work.