Ransomware attackers specifically target and attempt to destroy backup systems to increase the probability of payment. Hardening your system is critical. Please ensure you have reviewed your platform security using the Security Hardening Checklist
Cohesity

COHESITY Documentation

Explore our documentation to get started, discover products & new features, access troubleshooting guides, register sources, platforms support.

Products
Data Security Alliance
Visit Cohesity.com
Demos
Support
Blogs
Developers
Partner Portals
Cohesity Community
© 2026 Cohesity, Inc. All Rights Reserved.
Terms of Use|
Privacy Policy|
Legal|
  1. Home
  2. Veritas NetBackup™ Administrator's Guide, Volume I
  3. Section II. Configuring hosts
  4. Configuring Host Properties
  5. Configuration options for NetBackup clients
  6. WEB_SERVER_TUNNEL_USE option for NetBackup clients
Veritas NetBackup™ Administrator's Guide, Volume I

WEB_SERVER_TUNNEL_USE option for NetBackup clients

In a demilitarized zone (DMZ), the client uses a sequence of steps to set up communication with the master server. By default, the client tries to communicate with the master directly, and if the connection fails, tries to communicate using an HTTP tunnel on the media server. You can use the WEB_SERVER_TUNNEL_USE option to change the default behavior.

For more information, refer to the About the communication between a NetBackup client located in a demilitarized zone and a master server through an HTTP tunnel section in the NetBackup Security and Encryption Guide.

Table: WEB_SERVER_TUNNEL_USE information

Usage

Description

Where to use

On NetBackup clients.

How to use

Use the nbgetconfig and the nbsetconfig commands to view, add, or change the option.

For information about these commands, see the NetBackup Commands Reference Guide.

Use the following format:

WEB_SERVER_TUNNEL_USE = AUTO | ALWAYS | NEVER

The option uses the following parameters:

  • AUTO is the default value that uses an auto-routing algorithm.

  • ALWAYS defines that the connection should always use an HTTP tunnel. You can use this option for NetBackup clients that are in a DMZ.

  • NEVER defines that the connection should not use an HTTP tunnel. You can use this option for NetBackup clients that are not in a DMZ.

By default, the WEB_SERVER_TUNNEL_USE option is not present in the configuration file.

This option should appear only once in the configuration file.

Equivalent Administration Console property

No equivalent exists in the NetBackup Administration Console host properties.

Feedback

Was this page helpful?
Previous

WEB_SERVER_TUNNEL option for NetBackup clients

Next

Configuring server groups

Feedback

Was this page helpful?