You can isolate data by using direct connections or proxy-based connections to/from isolated storage targets and Commvault resources.
Direct Connections
You can use predefined network topology types when setting up network connections between client groups.
The client groups use a network topology instance to establish connections between each other, either in one direction, or in both directions. The clients in the client groups can be the CommServe computer, MediaAgents, or client computers.
For more information, see Direct Connections Using Predefined Network Topologies.
Proxy-Based Connections
You can establish port forwarding at the gateway to forward connections received by specific gateway ports to clients on the internal network. You can then configure the clients to open a direct connection to the port-forwarder’s IP address on a specific port to reach a particular internal server. This creates a custom route from the client towards the internal servers.
A port-forwarding gateway sends incoming connections to specific machines on the internal network based on the incoming connection’s destination port number.
For more information, see Port-Forwarding Gateway.