Running setupaa.cmd is installing the remote agent which is needed if the server is on the inside/outside the firewall. Any "server" that backup exec touches need a remote agent. Checkout technote http://seer.support.veritas.com/docs/255831.htm
This will give you a good look at what ports need to be open. You may have to create a user defined selection by ip or computer name if the server is not visible in my network places or backup exec after you put it in a DMZ.
Mark