Veeam backup firewall ports.

Veeam backup firewall ports The nasty part is, where the backup agent tries to connect itself. 4:10006]. Sep 4, 2024 · On backup infrastructure components, Veeam Backup & Replication automatically creates firewall rules for the required ports. Sep 14, 2023 · I suspect the windows firewall is enabled and you’ll need to disable it 1st if you’ve not allowed the ports. 3. 6170. Backup server, Veeam Backup & Replication console, mount server associated with the backup repository (only for Instant Recovery or restore from Enterprise Manager) Target machine with Microsoft SQL Server, staging server. The default port number is 1239. 10002, 10006. Directing 1024/65535 worked, but this is a hell of a long range of ports. This need an extra port 6167 and the Veeam Standard Transport Ports TCP2500-5000. Because vulnerability is surrounding, which ports from FW I need to open for Veeam's backups? Any solution is helpful. Veeam Data Mover includes the components responsible for deployment of non-persistent runtime components or persistent agent components during guest OS interaction. Management zone This section provides a step-by-step description of a VMware virtual machine backup process implemented in Veeam Backup & Replication. Sep 27, 2022 · The cache is being used intensively during every backup run to compare the source data with the target data. Have you tried as a preparation to open the necessary ports on your production VM? The connection tester runs on the backup server. 32-642. TCP/445 The Microsoft SMB Networking is used to install the Veeam components and their updates. Veeam backup server. Jun 7, 2023 · For my linux repos, SSH is generally disabled, the firewall doesn't have the ssh rule enabled, the iLO card uses unique credentials per host, each is connected to a disabled LAN port. With Linux OS, you may need to. Default ports used for communication with the Veeam backup server. Data between the Veeam Agent computer and backup repositories is transferred directly, bypassing Veeam backup servers. 2. service. This KB describes the possible options of enabling the rules. But in general you need to have access to the ESXi hosts to process backup overall (and VIX based Guest processing): Backup Server and Proxy Server need acces by TCP 443 to vcenter and by TCP 443 + TCP 902 to the ESXi host. Manages communication between the domain controller and the backup server. We would like to show you a description here but the site won’t allow us. May 3, 2017 · I'm backing up windows VM's from a customers network that is hosted on our private cloud platform to our Veeam platform and have a locked down rule on our Veeam platform firewall that only allows 10001 and 2500-5000 through, this allows the Veeam agent to backup to our platform without any problems at all, the problem with the 2500-5000 range Jul 26, 2018 · Noted, in order to use agent managed by backup server you should create protection group for the desired scope of machines and deploy agents via Veeam B&R server. Aug 15, 2024 · Port used to communicate with the installer service. Jan 7, 2025 · If you upgrade to Veeam Backup & Replication 10. Port used by Veeam Backup & Replication to connect to Kasten Plug-in for Veeam Backup & Replication. Jun 23, 2017 · There we need only port 443 (and in some older versions of the applications TCP port 80). When the Guest Interaction Proxy connects to a Windows 2012 R2 VM (client) to run VSS for application aware backups there is a file uploaded being renamed to C:\WINDOWS\VeeamVssSupport\VeeamGuestHelper. e. For the connections initiated by the guest interaction proxy to the backup repository, would it only be 2500-5000? Jan 24, 2014 · We have a Veeam server and want to connect over a cross connect to a windows server with a large directly connected driver to be used as a repository. Restart the linux server and the rules are automatically added. So theoretically, you shouldn’t need to manipulate your Windows f/w. 2500 to 3300 Oct 3, 2024 · Veeam Backup for Proxmox VE automatically creates firewall rules for the ports required to allow communication between the Proxmox VE server, workers and the backup server. I was looking at what ports Veeam wants to use for backup of Agent->backup repository, and it's a little worrisome Apr 12, 2017 · There are a few reference about Backup Repositories involvement in a Backup Copy Job using WAN Accelerators in the 'Used Ports' section, but again they have mentioned it like the Backup Repositories (Source and Target) talks to each other only when WAN Acceleration is not used for a Backup Copy Job. The following diagram shows the flow of data with the major firewall ports. Backup server. May 1, 2013 · We have limited our outgoing ports on the LAN side. Staging server. core. Configure the firewall to allow connections from the backup server to the Apache Server. TCP Port 443 needs to be opened from all Veeam Backup and VMware Backup Proxy servers as a Source with the vCenter internal IP as a target. Regards. In the Veeam ports list the 1058 is only required from Backup server to Windows server using vpower services Aug 14, 2012 · Veeam Community discussions and solutions for: Ports needed for NAS SMB Backup of File Shares and Object Storage Nov 5, 2009 · Veeam Community discussions and solutions for: Veeam firewall requirements of Veeam Backup & Replication Aug 16, 2024 · Port. Exact port numbers depend on the configuration of the Microsoft SQL server. Veeam Enterprise Manager: TCP-Port 9392: Für die Webschnittstelle des Enterprise Managers. For detailed list of ports used by Veeam Backup & Replication server and backup repositories, see the Used Ports section in the Veeam Backup & Replication User Guide. Veeam Backup for Microsoft 365 Server. In the Veeam ONE agent port field, type a number of the port that Veeam ONE Agent will use to collect data from connected Veeam Backup & Replication servers. Veeam Backup Repositories are (most) often physical. Veeam Backup for Microsoft 365 server. This tool was developed to simplify the identification of ports required by Veeam software. 9404. In this section, you can also find diagrams illustrating the interaction between Veeam Cloud Connect components and used ports in following scenarios: Dec 4, 2024 · The following table lists connection settings required for proper communication between Veeam ONE components, virtualization servers, VMware Cloud Director servers, Veeam Backup & Replication servers and Veeam Backup for Microsoft 365 servers. For example: random ESXi hosts to Veeam Windows proxy/mount servers ports 111 (NFS/portmapper). 49152 to 65535 (for Microsoft Windows Server 2008 or later) Aug 15, 2024 · Port used to communicate with the installer service. You can always just have a look at windows firewall to verify. 1 backup console new firewall port 9420 requirement - R&D Forums R&D Forums 5 days ago · Port. google. May 31, 2011 · Only communication allowed is firewall rules to allow port 9392, 9393, 9394 & 2500 - 2550 between the two VEEAM Proxy servers. Used for LDAP connections. Within the Veeam console, click Backup Infrastructure Jun 6, 2024 · I running Veeam for backup some remote equipment's files, but the Veeam server has installed ESET endpoint. 4 days ago · On backup infrastructure components, Veeam Backup & Replication automatically creates firewall rules for the required ports on Windows-based machines. Target Microsoft Exchange 2013/2016/2019 CAS server. Mar 26, 2015 · You just have to open your firewall from your Veeam server to two hosts: 1. Backup server We would like to show you a description here but the site won’t allow us. 135, 445. You can find the lists of the ports in the following sections of the Veeam Backup & Replication User Guide: Backup Server Connections; Microsoft Windows Server Feb 20, 2024 · And, when you install Veeam and its components (Proxies, Repos, etc), the installer already creates needed Windows f/w rules on the servers, as you can see from the Ports page in the Guide (see below): Veeam Ports. These ports together with port 445 are mandatory to deploy the Distribution Server component. Jul 30, 2018 · Sometimes it is impossible to enable the necessary Firewall rules required by Veeam ONE using Windows Firewall UI. 04. I'm reading some other stuff here but I don't really like the idea of such a long range of ports open. after we applied the firewall rules VEEAM couldn't detect the storage because the ESXI is on a different rage as the VEEAM Server. Default port used by Veeam Agent for Microsoft Windows operating in the managed mode for communication with the Veeam Backup server. May 31, 2023 · Required to collect events data from Veeam Backup & Replication servers. This one you can get from the Azure management portal. May 19, 2022 · Veeam Agent Computer. My plan at the moment is to try and work out if we can open ports to allow Veeam to communicate with the DMZ servers. Operator wrote: ↑ Thu May 23, 2024 6:36 am Before enabling the Windows Server firewall on all of my Veeam Backup servers, what are the ports or the rule I must manually add under: Code: Select all Jan 25, 2011 · Veeam Community discussions and solutions for: 12. Aug 26, 2011 · Port 902 is open to/from Backup Server/Proxy to ESX(i) host; Permissions to download files via ESX(i) host and/or vCenter An issue with Port 902 may represent an issue with a firewall on the ESXi host, Veeam Proxy, or the connection between the two. Veeam Backup Dec 28, 2014 · I've tried opening port 10001 up and i can connect to the Veeam server, however, when the client starts the backup it fails saying it can't connect to the server. Mar 24, 2025 · Make sure to open port on the Veeam Backup for Microsoft 365 server. Target Linux machine with PostgreSQL. But I'm not sure if that will be possible. Diese Liste ist nicht vollständig, da verschiedene Veeam-Komponenten May 2, 2025 · Used to connect to the helper appliance during file-level restore. Setup: Linux Agent: Centos 6 2. At Log Backup we start a Veeam service to do so. All in- and outbound traffic are blocked, but those explicitly allowed. If you are using a third-party firewall, these rules must be created manually. Workers. Port used for Microsoft Exchange web services connections. 10003. Jun 21, 2023 · # firewall-cmd --permanent --zone=veeamonly --add-port=6162/tcp --permanent Ok now we have made the zone but we have not activated it yet. This article documents how to change those default ports using registry settings on the Veeam Backup Server. Default port used by Veeam Agent for Microsoft Windows operating in the standalone mode for communication with the Veeam Backup server. Ports used to deploy the runtime coordination process on the target machine. Directing only 49152/65535 didn't work. Apr 10, 2015 · The most annoying circumstance is Veeam Backup & Replication server 9. The interface is divided into three sections, the first you are presented with is the following: Select the application group; Select the source you wish to get the ports from; Select the target you wish to get the ports to; Press ‘run’ to see the results. This port is used to provide faster Veeam Plug-in deployment. Make sure to open this port on the Veeam Backup for Microsoft 365 server. A Cloud Connect Gateway behaves like a proxy server between the agent and the management server. Dell VNX(e) Storage; Dell Unity XT, Unity Storage; Dell PowerScale (Formerly Isilon) Storage; HPE 3PAR StoreServ Storage Dec 14, 2017 · NSX-t allows VMC customers to directly access the management network over the built-in firewall. Remote Access Console (Internet) Cloud gateway. COM+ Network Access: COM+ Network Access (DCOM-In) Network Discovery: Network Discovery (LLMNR-UDP-In) Required to gather CPU and memory performance data from Veeam Backup for Microsoft 365 servers. Depending on the repository type, you should open the ports for communication with the source proxy and also those required for communication with Windows or Linux server, depending on the platform used. Certificate Revocation Lists. These need to be operational on your firewall between each component of Veeam Backup and Replication infrastructure when you choose to use them How to use this tool Prepare. Can you advies which ports to allow in the lan in order to keep the veeam up and running wihout any issues Feb 2, 2017 · I've noticed the default firewall for server 2016 and windows 10 isn't letting my veeam inject it's service. By default, this port is 6180, but the service provider may customize this if customers have strict egress firewall rules. 254. You can simply create an ANY/ANY rule to allow all traffic, perform some tasks in VBR, then monitor what ports you see traffic flowing to/from and create rules based off of that. Veeam Agent computer. 1536 does not recognize PasswordAuthentification on the target system is not allowed but prints out a very confusing message instead: "Host rescan is required" when waiting for rescan job and unable to process the backup. 636, 3268, 3269. When we start a job session, for each task we start VeeamAgent process. Feb 16, 2010 · Yes, the correct credentials were supplied. The default range of transmission channel ports is available in the Used Ports section of the user guide. i. It then checks the used ports before the port 6184 is released by the running agent. Dec 5, 2023 · By default, during the deployment of Veeam Agent for Linux on a Linux machine by Veeam Backup & Replication, the services listed below use the default ports indicated. So as of now I'm disabling the firewall, running the backup once, then enabling the firewall. My configuration was looking like this: domain controller wi01: firewall currently switched off (I know it's bad) veeam-Server outbound traffic is allowed Apr 25, 2017 · Ports 2500-5000 have an IPTABLES rule to allow forward traffic between devices, as well as a rule for 10002 for the backup agent. Nov 28, 2024 · Veeam Backup for OLVM and RHV automatically creates firewall rules for the ports required to allow communication between the backup appliance, workers and the backup server. Backup repository. Apr 2, 2025 · To learn what ports are required for other Veeam Backup & Replication components in the Veeam Cloud Connect infrastructure, see the Ports section in the Veeam Backup & Replication User Guide. 9194. Mar 13, 2024 · The Veeam Backup Service could not assign itself port 10005 when it started because another application already used that port. Catalog service port. Make sure to allow incoming traffic on these ports in your Windows Firewall settings. 1 backup console new firewall port 9420 requirement of Veeam Backup & Replication 12. Data consistency check Jul 17, 2021 · As per the VBO Used Ports link it shows "Veeam Backup for Office 365 Components" to Veeam Backup for Office 365 Server thru port 9191. Hence moving the used port to 6185. The backup file validation is performed after all Mar 24, 2010 · Has anyone created a script to open the ports required by veeam to backup a virtual machine. 2 to 12. After the process completed successful make sure you enable the Windows Firewall again! Disable remote RDP services to the repository servers. Is this what I need to configure on the firewall? Backup server/repository >>> Backup proxy TCP&UDP 135, 137-139, 445 TCP 2500-3300 Jul 14, 2014 · Allow Rule: C:\Program Files (x86)\Veeam\Backup Transport\x86\VeeamAgent. Protocol. I've configured port forward rules on the firewall, but cannot get the source proxy to see the destination proxy. A firewall in the environment is blocking traffic between the machine where Veeam Agent for Microsoft Windows is installed and the Veeam Backup Server. xxx. So you have to open ports required for the data mover services to talk to each other. For more information, see this Microsoft Aug 13, 2019 · The new port range only applies to newly deployed components after Veeam Backup & Replication 10 is installed. Sep 7, 2017 · The following registry value may be used to force the Veeam Agent for Microsoft Windows service to start on a specific port. Veeam Backup service port. 1. blob. So although it isnt impossible, an attacker must compromise multiple layers to gain access. The following table describes network ports that must be open to ensure proper communication of workers with other backup infrastructure components. Here are some examples of the most important ports: Veeam Backup & Replication: TCP port 10001 to 10300: These ports are used for communication between the Veeam backup server and the proxy servers and repositories. Used by the AHV Platform Service to enable communication with the Veeam Backup & Replication database. 1433, 1434 and other. For AD restore we need the LDAP ports. Default range of ports used for managing data transfer during restore to the original (remote) machine or another Linux machine with Apr 3, 2025 · Port used for communication with the Veeam Backup Service. According to the documentation I need from the backup proxy (on the Veeam server in this case) ports TCP 49152-65535 to be open to the server with the large drive being used as a repository. internal) through the ports TCP 80 and UDP 53, 123 Dec 9, 2021 · Today I received a message from a customer asking for a way to restore the firewall rules created during the installation. You signed out in another tab or window. TCP Jul 15, 2020 · If StoreOnce Catalyst operations pass through a firewall, the network administrator must open (TCP) ports 9387 (Command protocol) and 9388 (Data protocol). thanks, John You signed in with another tab or window. Jan 15, 2025 · In the Website port field, type a number of the port that will be used to access the Veeam ONE Web Client through a web browser. I know that mount server provides powerNFS for instant restore etc. Jun 9, 2021 · The idea behind the tool was to make it easier to find all the ports you need for a Veeam solution. Sep 2, 2024 · When you add a Microsoft Windows machine to the backup infrastructure, Veeam Backup & Replication deploys Veeam Data Mover on it. Ports 6160 and 11731 are used by the Veeam Installer Service. We have problems configuring our workstation firewall to allow Veeam backup agent. 4 Enter backup server port number [10006]: 5001 Dec 20, 2015 · We are currently implementing new firewall rules and I'm seeing connections that I can not see in Veeam's used ports documentation. Data between the Veeam Agent for Linux computer and backup repositories is transferred directly, bypassing Veeam backup servers. Currently it only has VMware and Hyper-V ports; however, that will be changing soon and will have: VMware; Hyper-V; AHV; Enterprise Feb 4, 2019 · Enter backup server port number [10006]: 10006 Enter username: vsadmin Enter password for vsadmin: Failed to connect to the port [11. 7. 6. Jul 12, 2016 · For Veeam Backup for Microsoft 365, data transferred over port 443 (TCP) can be affected by this issue. I suggest starting with opening the ports used by the data mover service for data transmission. TCP port 9392 (Veeam Backup & Replication) Please note that these ports are required for Veeam to communicate with your Windows servers. 6160 + 6162 are added and then it dynamically add the 2500-3000 as needed during the backup. The default port number is Mar 1, 2023 · Chrony supports NTS beginning from version 4. The first VeeamAgent process will start with Port 2500, the second will use Port 2501, May 5, 2024 · I'm backing up a HyperV VM on a different subnet than B&R and with a stateful firewall traffic can be initiated from B&R to the VM on a different subnet. 0 from earlier versions of the product, the range of ports from 2500 to 5000 applies to the already added components. Is there a port range I can open on our firewall for the data transfer? Feb 29, 2012 · Veeam Community discussions and solutions for: Firewall ports and Endpoint Backup of Veeam Agent for Microsoft Windows While the cloud gateway has to talk with the managing Veeam Backup & Replication server over TCP ports 6168 and 6160, it has to be reached only with the single TCP/UDP port used by the service over the internet. Jul 29, 2024 · Additionally, if you're using Veeam Backup & Replication, you may also need to open: 1. Dec 3, 2018 · So starting from a client with newly installed Windows Server 2019, with default Windows firewall configuration and a VEEAM server with Windows Server 2016 (veeam has installed the Guest Interaction Proxy on this server by default), I have to create a client rule for open traffic coming from the 2016 server on ports: 135, 137, 139, 445 (6190, 6290 are not necessary). Veeam Deployer Service (veeamdeployment) - Default Port: 6160 Jan 16, 2015 · Restore speed doesn't go over 500 KB\s. Microsoft Active Directory machine. Feb 19, 2025 · Port. SQL restore (and SQL Log Shipping) is a bit more complex. By default, port 9393 is used. Jul 6, 2023 · What are the ports and the protocol used by the Veeam backup server v12? I wanted to turn on my firewall, but don't want to cause the backup, replication or restore process to fail. exe (All traffic allowed for this program) No IP or port specifics. TCP/HTTPS. Mar 23, 2018 · Has Veeam got a recommendation for backing up DMZ servers. For more information on Enterprise Manager network connectivity, refer to the Enterprise Manager article of the Veeam Backup and Replication Best Practices documentation. By DMZ I mean servers which are mostly blocked from accessing the internal network where your B&R and repository servers are. Jan 25, 2024 · Disabling firewall works only for Windows machines. 334 to 12. exe. I would like to know the exact ports required\used between backup servers (Veeam Managed Servers) and target VM (customer subnet). Next step would be to configure backup job (which in you case can be managed by agent). 254 (metadata. Jul 26, 2018 · The agent was already installed, and the Backup Server when doing a scan, for some reason decides it needed to do a "repair". ) NTS requires TCP port 4460 outgoing, additionally to UDP port 123 for NTP. 49152 to 65535. Port used for communication with the Veeam Backup Service. The ports that Veeam requires depend on the specific components you use and how your IT environment is structured. Feb 19, 2024 · hi veeam communityI want to turn on the firewall of the backup server and configure the firewallI have veeam backup and enterprise manager on my serverThe servers that are backed up are mostly on hyper-v cluster. 10005. 49152 to Jan 14, 2014 · Dear all, has anyone already figured out a minimum port/URL firewall forwarding rule list? In the VBO user guide, I can only see generic requirements like forwarding port 443 to "Microsoft Exchange Online" Jun 24, 2019 · Which ports must be opened on the firewall to allow access from my Veeam Backup server/software to a NAS device on the DR site ? The Veeam backup will be configured to make the normal backups on a local available NAS and do a copy of it to the DR site for. The way to activate it is by reloading the rules from disk Apr 11, 2025 · On backup infrastructure components, Veeam Backup & Replication automatically creates firewall rules for the required ports. You can find the full list of the ports below. Veeam Kasten Plug-in for Veeam Backup & Replication. These ports are all standard TCP ports and can be amended to fit into a corporate firewall infrastructure. 49152 to Jan 10, 2025 · During installation, Veeam Backup & Replication automatically creates firewall rules for default ports to allow communication for the application components. Veeam Backup & Replication Ports; Veeam ONE Ports; Veeam Agent for Microsoft Windows Ports; Veeam Agent for Linux Ports; Ports 2500-3300 are dedicated to data transport. 3, as example). Mount server. Nov 5, 2020 · Hello, for VMware Tools Quiescense (Job - Storage - Advanced - VMware) you do not need any special network connection. Jan 4, 2017 · Perry, The firewall rules are created on the Backup & Replication server. Port used for connections to the mount service. Apr 7, 2015 · Hi, yesterday i open a call #04340072 for the same question. Veeam Backup Server. Jan 10, 2025 · Hi all, I'm searching a confirmantion about the Port 6160/TCP destiny on a (Linux) hardened Backup Repository just after a Veeam B&R upgrade (say moving from 12. I really need this feature, too. Apr 7, 2013 · 2) Veeam Backup Management Service (In) - c:\program files\veeam\backup and replication\backup\veeam. May 11, 2018 · After it, I execute “ufw enable” to enable the integrated firewall with Ubuntu 24. 6180. May 5, 2023 · Below are convenient links to the most frequently accessed port lists for popular products. Dec 17, 2024 · If the SureBackup job is configured to validate backup files, Veeam Backup & Replication performs a cyclic redundancy check for the backup file from which the machine under verification is started and, optionally, for backup files from which the machines in the application group are started. (CAUTION: Ubuntu 22. Port. Ports used for establishing an HTTPS connection to SAP Web Services. windows. #1 Global Leader in Data Resilience Oct 13, 2015 · The Veeam Agent only talks to the Veeam Cloud Connect Gateway. You can find the lists of the ports in the following sections of the Veeam Backup & Replication User Guide: Backup Server Connections; Microsoft Windows Server Mar 23, 2015 · Hello, I have the same issue for Linux FLR restore, the port 1058 is dropped by the FW between ESXi and the proxy making the vPowerNFS service. For such setup you would need to keep port 10005 opened as was mentioned in Agent Management guide. Obviously if you also have a device between your windows servers such as a physical firewall you will need to also manually open those same ports through it. This port is used by the Veeam Guest Catalog Service to replicate catalog data from backup servers to Veeam Backup Enterprise Manager. The previous person in the job had allowed the firewall traffic through with no restrictions and this issue happened when I tightened up the firewall rules. Not sure what firewall you have, but nearly every NGFW will allow you to view traffic analysis from point to point. net <-- The URL of your blob storage in Azure. Initialization Phase . Dec 6, 2011 · Ports 9392, 9393 and 9394 are used for Backup and Replication Services, the backup catalog and the Veeam Enterprise Management console respectively. TCP. Nov 20, 2023 · Port. 5. Can anyone explain to me what does Veeam Backup for Office 365 Components here referring to? Is it VBO Proxy server? Or is it the Microsoft Office 365 URL/IP address range? Nov 30, 2023 · For more information about Veeam Backup & Replication ports, see Ports. My que TCP-Port 6160: Kommunikation des Backup-Agents mit dem Veeam-Backup-Server. 389. For more information, see this Microsoft Backup server is a Windows 7 machine, destination proxy another Windows 7 machine. I decided to have a go at manually configuring all rules and have a GP for Proxies, GP for Repo, GP for B+R etc with ports and IPs from the Veeam Ports Doc but I have got myself into a bit of a mess and am Sep 4, 2024 · On backup infrastructure components, Veeam Backup & Replication automatically creates firewall rules for the required ports. Backup server, Veeam Backup & Replication console, mount server associated with the backup repository (only for Instant Recovery or restore from Enterprise Manager) Target Windows machine with Oracle, staging server. x86_64 Nov 14, 2020 · This port designation is correct as of August 2020. May 2, 2025 · Note: Ports 2500 – 3300 are required if during data transmission, the Veeam Data Mover Service is started on the Veeam backup server — for example, when the backup is targeted at the default backup repository of the Veeam backup server or when Veeam backup server acts as a gateway to the target backup repository. Firewall Rules Aug 22, 2014 · Review the firewalls present in the environment to ensure accommodations have been made for the ports used by Veeam Backup & Replication. Veeam Data Mover ports are Port 2500 to 3300. Providers can choose to enable this port only for the time needed to install the components, or to configure the firewall to allow this communication only if originated from the Veeam Backup & Replication service. For the full list of ports used for connections to the FLR helper appliance, see the Veeam Backup & Replication User Guide, section Used Ports. Turning the firewall OFF allows the restore to proceed, but my preference is either: For the Veeam software to open the firewall ports it needs by itself, just like it says in the manual. If an environment was upgraded from a version of Veeam Backup & Replication before 10, all existing components that were managed before the upgrade will continue to use 2500-5000. SAP Web Services. Key Location: HKLM\SOFTWARE\Veeam\Veeam Endpoint Backup\ Value Name: EndPoint_Rpc_Transport_Port We would like to show you a description here but the site won’t allow us. By default the Mount Server role is assigned to the repository, but this can be delegated out to any Windows based server at the remote site, which runs under the service ‘Veeam Mount Service’ The VBR Server communicates with the Mount Server over ports TCP 9401 and TCP 6170 by default Feb 13, 2024 · On your NAT gateway, configure the port forwarding rule for TCP and UDP protocols: from an incoming port (specified in the External port field at the previous step of the wizard) to the port on the local network used for listening to connections (specified at the Incoming port field at this step of the wizard). using NetSh \ Set-NetFirewallProfile Don't want to recreate the wheel if someone already did it My thought is that on each of our servers, I install both the Agent (to do backups) and the Backup and Replication server service (to receive backups) and then set up repositories onto those large spare hard drives we both have. exe Testing was performed using PowerShell from a machine that should be blocked from connecting via Veeam Console to the VBR. To. 10001. In the gui of Server 2019 the firewall shows a reset button, when rules will be manually added to the firewall Jun 15, 2024 · The help center article you have shared talks about "automatically opens ports used by the Veeam Data Mover". Default port used for communication with the Veeam Cloud Connect Service and Veeam Cloud Connect-side network redirector(s). That means Ubuntu 22. Aug 15, 2024 · Port. Per the documentation you linked, (at the top) veeam should automatically add all required ports in windows firewall. These rules allow communication between the components. I am not sure if that counts also when you deploy the components to the Hyper-V host. Backup server, Veeam Backup & Replication console. Jan 7, 2025 · On backup infrastructure components, Veeam Backup & Replication automatically creates firewall rules for the required ports. It is a massive attack surface available :/ Nov 21, 2014 · We are trying to backup workstations to our VBR server. 2500 to 3300. A backup job can be started automatically or manually in the Veeam Backup & Replication console, Veeam Backup Enterprise Manager web console, by means of PowerShell, RESTful API and other. However each proxy server can see it's local Infrastructure, datastores etc. Veeam Explorer for Microsoft Exchange. Nov 28, 2011 · Servers Protocol Port/s Need Env A Veeam / Env B vCenter HTTPS+TCP 443 Connections to vCenter Server Env A Veeam / Env B Veeam TCP 2500-5000 Transmission channels for replication jobs Env A Veeam / Env B Veeam TCP 6061 Veeam vPower NFS Service Env A Veeam / Env B Veeam TCP 6062 Veeam Data Mover Service Sep 11, 2017 · MSSQL staging server is installed locally on veeam backup server. Veeam Agent Computer (Unix Feb 26, 2025 · Default port used by Veeam Agent for Microsoft Windows operating in the standalone mode for communication with the Veeam Backup server. After doing a little research, I stumbled across a post on the Veeam R&D forum. 04 needs to be used for the following section. Firewall on the Veeam Backup Server; Firewall on the Windows Jul 19, 2016 · I am currently working on the firewall settings and yesterday I tried to create the rules I need for an active directory object restore. Depending on the type of backup repositories that you use for Veeam Plug-in backups, the following ports must be open to allow communication between backup Dec 13, 2024 · Hello,I’m using Ubuntu 24. Jun 17, 2024 · The following information of Veeam Kasten for Kubernetes services and network ports associated with them will help with port mapping and rules in a firewall VM environment or service mesh configuration. Do you want to restart the wizard? (Y/n): Y Enter backup server name or IP address: 11. Port used by Veeam Agent for direct connection to the We recommend using the Veeam Ports Mapper tool for this specific use case. 1129, 5<xx>14 where <xx> is the number of the instance. I believe it’s because backup\mount servers doesn't have access to the subnet to which file restore is being done. This registry value should be created on the machine where Veeam Agent for Microsoft Windows is installed. Some errors occurred while applying configuration. Jan 25, 2024 · Veeam Backup Server. Backup Appliance The following table describes network ports that must be open to ensure proper communication of the backup appliance with other backup infrastructure Nov 30, 2023 · For more information about Veeam Backup & Replication ports, see Ports. To do that, create firewall rules to connect to the address 169. This design assumes that all connections between security zones are denied unless explicitly allowed via a firewall rule. Check Managed Server Configuration. It doesn’t provide mapping for specific hosts or any of the advanced feature that the Veeam Ports Tool provides. Jan 24, 2012 · Now regarding the network ports that must be opened, my understanding is that apart from the network ports that must be opened to ensure proper communication between Veeam Agent Computers and Veeam backup repositories, the only port needed between Veeam Agent Computers and the Veeam Backup Server itself narrows down to TCP 10005. Jan 11, 2019 · Please advise how to configure the Windows Firewall to permit SQL database restores to a SQL server. Please see the Helpcenter for a complete list of the firewall ports. Reload to refresh your session. 443. Nov 7, 2012 · If I understand you right, it will be a repository server rather than a proxy server. Somehow he managed to reset the Windows firewall back to default which wiped all custom rules including the Veeam ones. Veeam Agent Computer (Linux) on EC2 Instance. Jul 24, 2023 · バックアップインフラストラクチャのコンポーネントでは、Veeam Backup & Replicationによって、必要なポートについてファイアウォールのルールが自動的に作成されます。これらのルールにより、コンポーネント間の通信が可能になります。 ポートのリストは、Veeam Backup & Replicationユーザーガイド の Apr 23, 2019 · Yes in this case it is Hyper-V, though I assume the ports would be the same regardless. For a complete list of the required network ports, please refer to the network diagram and the additional general required ports in the Veeam Backup & Replication User Guide. Notes. Oct 5, 2010 · Veeam Community discussions and solutions for: Hardened Ubuntu Repo: ufw firewall of Veeam Backup & Replication Aug 26, 2024 · For every TCP connection that a job uses, one port from this range is assigned. 04 is only supported as Hardened Repository as of Veeam Backup & Replication v12. Sep 7, 2021 · Veeam will add Firewall rules for Veeam during installation, which are visible as Veeam Networking in the firewall under Allowed apps and features. 4 days ago · On backup infrastructure components, Veeam Backup & Replication automatically creates firewall rules for the required ports on Windows-based machines. 169. Ports 137 to 139 are used by backup infrastructure components to communicate using NetBIOS. But when it's time for the VM to transfer SQL transaction logs, it seems the VM wants to initiate that traffic to B&R, which the VM is currently not allowed to do. For more information on port ranges, find the relevant product or component user guide in the Help Center and consult the Used Ports page. 04 and I would like to know how do you configure firewall on this system to allow only required port please ? If my research are correct, I could see I need only 22 + 6160 + 6162 port open and Veeam open the others when neededI think I understand the commands are differents Feb 18, 2014 · Veeam Community discussions and solutions for: What ports to open in my firewall if using CloudConnect+R of Veeam Backup & Replication Aug 31, 2015 · While the SureBackup/Instant Recovery is running, the disk is mounted with the help of the data mover service on the backup repository server and Hyper-V server. Veeam will create the firewall rules allowing you to re-enable the firewall after readding it back in. You switched accounts on another tab or window. . el6. Recommended dynamic RPC port range for Microsoft Windows Server 2008 or later. I have turned on VMWare Tools Quiescence and turned off Veeam VSS and it works fine. Oct 6, 2016 · I'm working with a very security oriented setup with UAC, AppLocker, Windows firewalls overridden by central policies and network firewalls. Dec 16, 2024 · From. backup. Ports used to communicate with Microsoft SQL servers hosting content databases. Oct 31, 2022 · Backup. The problem is: I need to disable firewall in order to get a successful backup job. Feb 18, 2020 · Veeam proxy firewall ports. 6172. Management of the Veeam Agent is completely done within the Veeam Service Provider Console. I will turn Veeam VSS back on when we go to v5. Jun 11, 2024 · Port. Veeam Backup & Replication console and Veeam Backup & Replication and Veeam One server. There are several physical servers, including SQL Server, which is also a cluster. 0. Dec 19, 2024 · Port 135 is optional. Veeam Cloud Connect: TCP-Port 6180 bis 6183: Wird für die Verbindung mit der Cloud-Infrastruktur genutzt. Required to manage inbound/outbound traffic when interacting with Veeam Explorer for Microsoft Exchange. On the machine, Veeam Agent and a management agent are installed. May 20, 2016 · Remote Office – with V9 Veeam Mount Server . I noticed that on our Linux hosts the configured firewall set or rules change after the upgrade (say upgrading from 12. I have the ports listed under "Windows Server Connections" open from the backup server to the guest interaction proxy. May 11, 2021 · Allow access to the Google Cloud metadata server that stores backup appliance metadata, to the NTP server that provides accurate timing to the backup appliance, and to the Cloud DNS server. TCP, UDP. 310, done today). Opening these ports allows the StoreOnce Catalyst traffic to pass to and from the StoreOnce Systems. How it works . What connections are required from Veeam backup server to this mssql server, when I use a proxy in the network where the mssql server resides? I opened the database port (tcp_1433) from veeam backup server to mssql server. mvjz xsxhr rptp nrgy yqxzva rpqseea fvgki gvwbuz moydku ifxmqbr qwuopq pjgsu fbjqzit axetwu var