Most corporate backup strategies revolve around virtual machines: the hypervisor is well protected, jobs run every night and reports arrive on time. But outside that perimeter sits a huge share of the company's information: the employees' laptops and workstations and the physical servers that were never virtualized.
Remote work has made the problem worse. A laptop that spends the week between the employee's home, a coworking space and the odd hotel is almost never connected to the office network, and traditional backup solutions — which depend on a VPN or an on-premises server — simply cannot reach it.
In this article we explain how Veeam Agent closes that blind spot: what it protects, which backup modes it offers, how the remote work scenario works without a VPN against a Veeam Cloud Connect repository, how it is managed centrally, and which recovery options exist, from a single file to a full bare-metal restore.
The Blind Spot of Corporate Backup
Even when the official policy says "everything lives on the server", reality looks different: spreadsheets with quotes on the desktop, PST mail archives, multi-gigabyte design projects, code that never made it to the repository, local credentials and configuration. When a laptop breaks down, gets lost or is encrypted by ransomware, that information disappears with it.
The other forgotten asset is the physical server: the machine running the factory ERP, the database behind a legacy application or the domain controller that nobody ever virtualized. Not being a VM, it falls outside the hypervisor backup jobs, and its only protection is often a manual copy to a USB drive that someone makes "when they remember".
The technical answer to both cases is the same: a backup agent installed on the machine itself, able to work autonomously, ship the data to a remote repository and restore everything when something fails. That is exactly what Veeam Agent does.
Veeam Agent: What It Protects and Backup Modes
Veeam Agent is available for Windows, Linux and Mac and is part of the Veeam Data Platform. It protects everything from a sales rep's laptop to a production Windows Server or Linux physical box, and it uses the same backup format and restore tooling as Veeam Backup & Replication, so it fits naturally into an existing Veeam strategy.
The agent offers three backup modes, from broadest to narrowest:
| Backup mode | What it copies | Possible recovery | Best for |
|---|---|---|---|
| Entire computer | All disks, operating system, applications and data | Bare-metal, to VM, volumes and files | Critical laptops and physical servers |
| Volume level | Specific disks or partitions (e.g. only D:) | Full volumes and files | Machines with data separated from the OS |
| File level | Selected folders and files | Individual files and folders | User profiles and working directories |
For laptops and physical servers, the general recommendation is the entire computer mode: thanks to block-level incremental backup with changed block tracking, after the first copy only modified blocks are transferred, so the daily cost in time and bandwidth is minimal while every recovery option remains available.
Remote Work: Backup Straight over the Internet, No VPN
The scenario that truly sets Veeam Agent apart is the machine that never sets foot in the office. The agent can send its backups straight over the internet to a Veeam Cloud Connect repository operated by a service provider, such as our Veeam offsite backup. The connection travels TLS-encrypted over a single port, with no VPN, no ports opened on the home router and no company service exposed.
The key to the model:
The laptop is protected from any network — home Wi-Fi, a hotel or a phone sharing its data connection — without depending on the corporate VPN or on the user doing anything. If there is internet, there is backup.
And when there is no connection? Veeam Agent includes a local backup cache: if the repository is unreachable at the scheduled time, the restore point is stored on the local disk and synced automatically to the repository as soon as connectivity returns. The machine never misses a backup just because it was offline.
Scheduling is flexible and designed for machines that power on and off at odd hours: daily backups at a fixed time, backup on session lock or when the charger is plugged in, and automatic resume of interrupted transfers. You can also set bandwidth limits so the backup never degrades video calls or saturates a home connection during working hours.
The whole process is encrypted end to end: data is encrypted with AES-256 on the machine itself before it leaves, travels TLS-encrypted and is stored encrypted in the repository. The key is defined by the customer, so not even the repository provider can read the content of the backups.
Centralized Management with Veeam Backup & Replication
Installing and configuring agents by hand is feasible with five machines, not with fifty. For fleets of endpoints, Veeam Backup & Replication lets you manage every agent from the same console as your VMs, through three building blocks:
- check_circle Protection groups: groups of machines defined by Active Directory organizational unit, by CSV list or manually. A new laptop joining the right OU is protected automatically, with no administrator intervention.
- check_circle Automatic agent deployment: the console installs, updates and configures Veeam Agent on the machines in the group remotely, applying the defined backup policy without touching each computer.
- check_circle Centralized monitoring: the status of every job, machines that have gone days without a backup, alerts and email notifications — all in the same dashboard where VM backups are already supervised.
If you run your own Veeam platform, at EasyDataHost we also offer Veeam licenses with local support to size the installation correctly.
Recovery: from a Single File to Bare-Metal
A backup is only worth what its restore is worth. Veeam Agent covers the full spectrum of recovery scenarios:
- check_circle File and folder restore: the most frequent case. A user deletes a document or a folder and it is recovered in minutes from any restore point, without restoring the whole machine.
- check_circle Bare-metal recovery: after a disk failure, a theft or a ransomware attack, you boot the replacement machine with the recovery ISO (Veeam Recovery Media), connect to the repository and restore the entire system: operating system, applications, configuration and data.
- check_circle Restore to dissimilar hardware: recovery does not require a machine identical to the original. The broken laptop can be restored onto a different model, adjusting drivers during the process.
- check_circle Restore to a virtual machine: the backup of a physical server can be turned into a VM on the hypervisor (P2V), an excellent path both for disaster recovery and for retiring old hardware.
In the remote work scenario this means a laptop stolen on Monday can be operational again on Tuesday on a new machine, restored directly from the Cloud Connect repository, without the user ever visiting the office.
How It Fits EasyDataHost's Unified Rate
Historically, protecting endpoints was a headache on the invoice too: each workload type had its own price and adding laptops meant recalculating everything. With the unified rate we announced in 2026, that problem disappears: every protected PC, workstation or physical server costs exactly the same as a VM: €6.50 per unit per month, with no maintenance fee.
The service comes down to two lines: protected units at €6.50 plus storage consumed per TB. It makes no difference whether the unit is a hypervisor VM, the sales director's laptop or the physical server running the ERP. You can estimate your specific case in a minute with our Veeam backup calculator.
This model removes the perverse incentive of "protecting only what is cheap": extending the backup perimeter to workstations no longer requires renegotiating the rate — you just add units.
Best Practices for Endpoint Backup
A handful of configuration decisions make the difference between an efficient endpoint backup and one that burns storage and bandwidth without adding value:
- check_circle Exclude sync folders for OneDrive, Google Drive or Dropbox if they are already protected by a Microsoft 365 backup or equivalent: copying them twice doubles storage without improving protection.
- check_circle Set appropriate retention: for endpoints, 14-30 daily restore points are usually enough, adding weekly or monthly copies (GFS) only on the machines that justify it.
- check_circle Test your restores: generate the recovery ISO for critical machines, keep it accessible and rehearse at least one bare-metal recovery and several file restores per year.
- check_circle Tune bandwidth limits for working hours and guard the encryption password carefully: without it, encrypted backups cannot be restored.
Frequently Asked Questions
Do I need a VPN to back up a laptop while working remotely?
No. Veeam Agent sends TLS-encrypted data straight over the internet to the Veeam Cloud Connect repository, with no VPN and no open ports on the user's network. If there is no connection, the local cache stores the restore point and syncs it once connectivity returns.
How much does it cost to protect a PC or a physical server with EasyDataHost?
The same as a virtual machine: €6.50 per unit per month under the unified rate, with no maintenance fee. Storage is billed separately per TB consumed.
Can I recover a full laptop if it breaks down or gets stolen?
Yes. With the Veeam Agent recovery ISO you boot the replacement machine and restore the entire system from the repository, even onto different hardware. You can also restore it as a virtual machine or recover individual files.
Conclusion
A backup plan that only covers virtual machines protects the datacenter, but not the company. Veeam Agent extends that protection to workstations and physical servers with the same technology and the same console:
- arrow_right Veeam Agent for Windows, Linux and Mac protects laptops, workstations and physical servers with entire-computer, volume-level or file-level backup.
- arrow_right For remote work, backups travel straight over the internet to the Cloud Connect repository: no VPN, with a local cache, flexible scheduling, bandwidth limits and end-to-end encryption.
- arrow_right Recovery covers every scenario: individual files, bare-metal with a boot ISO, dissimilar hardware or conversion to a virtual machine.
- arrow_right With EasyDataHost's unified rate, every protected machine costs €6.50/unit/month — the same as a VM, with no maintenance fee.
If you want to close the blind spot in your backup strategy, contact our team: we will review your fleet of machines and prepare a proposal with no obligation.