Veeam backup firewall ports But when it's time for the VM to transfer SQL transaction logs, it seems the VM wants to initiate that traffic to B&R, which the VM is currently not allowed to do. Target Microsoft Exchange 2013/2016/2019 CAS server. 2500 to 3300. For more information, see this Microsoft Dec 13, 2024 · Hello,I’m using Ubuntu 24. Port. Is this what I need to configure on the firewall? Backup server/repository >>> Backup proxy TCP&UDP 135, 137-139, 445 TCP 2500-3300 Jul 14, 2014 · Allow Rule: C:\Program Files (x86)\Veeam\Backup Transport\x86\VeeamAgent. Default range of ports used for managing data transfer during restore to the original (remote) machine or another Linux machine with Jan 7, 2025 · On backup infrastructure components, Veeam Backup & Replication automatically creates firewall rules for the required ports. Operator wrote: ↑ Thu May 23, 2024 6:36 am Before enabling the Windows Server firewall on all of my Veeam Backup servers, what are the ports or the rule I must manually add under: Code: Select all Per the documentation you linked, (at the top) veeam should automatically add all required ports in windows firewall. Backup server, Veeam Backup & Replication console, mount server associated with the backup repository (only for Instant Recovery or restore from Enterprise Manager) Target Windows machine with Oracle, staging server. Somehow he managed to reset the Windows firewall back to default which wiped all custom rules including the Veeam ones. How it works . 443. Aug 26, 2024 · For every TCP connection that a job uses, one port from this range is assigned. Veeam Explorer for Microsoft Exchange. I decided to have a go at manually configuring all rules and have a GP for Proxies, GP for Repo, GP for B+R etc with ports and IPs from the Veeam Ports Doc but I have got myself into a bit of a mess and am Sep 4, 2024 · On backup infrastructure components, Veeam Backup & Replication automatically creates firewall rules for the required ports. core. The way to activate it is by reloading the rules from disk Dec 14, 2017 · NSX-t allows VMC customers to directly access the management network over the built-in firewall. Nov 20, 2023 · Port. Notes. 0 from earlier versions of the product, the range of ports from 2500 to 5000 applies to the already added components. 9194. Depending on the type of backup repositories that you use for Veeam Plug-in backups, the following ports must be open to allow communication between backup May 11, 2018 · After it, I execute “ufw enable” to enable the integrated firewall with Ubuntu 24. 254. If you are using a third-party firewall, these rules must be created manually. Nov 5, 2009 · Veeam Community discussions and solutions for: Veeam firewall requirements of Veeam Backup & Replication Nov 28, 2011 · Servers Protocol Port/s Need Env A Veeam / Env B vCenter HTTPS+TCP 443 Connections to vCenter Server Env A Veeam / Env B Veeam TCP 2500-5000 Transmission channels for replication jobs Env A Veeam / Env B Veeam TCP 6061 Veeam vPower NFS Service Env A Veeam / Env B Veeam TCP 6062 Veeam Data Mover Service Jun 15, 2024 · The help center article you have shared talks about "automatically opens ports used by the Veeam Data Mover". Jan 25, 2011 · Veeam Community discussions and solutions for: 12. Restart the linux server and the rules are automatically added. windows. For more information on Enterprise Manager network connectivity, refer to the Enterprise Manager article of the Veeam Backup and Replication Best Practices documentation. TCP/HTTPS. 6160 + 6162 are added and then it dynamically add the 2500-3000 as needed during the backup. Feb 18, 2014 · Veeam Community discussions and solutions for: What ports to open in my firewall if using CloudConnect+R of Veeam Backup & Replication. For detailed list of ports used by Veeam Backup & Replication server and backup repositories, see the Used Ports section in the Veeam Backup & Replication User Guide. TCP Port 443 needs to be opened from all Veeam Backup and VMware Backup Proxy servers as a Source with the vCenter internal IP as a target. With Linux OS, you may need to. Dell VNX(e) Storage; Dell Unity XT, Unity Storage; Dell PowerScale (Formerly Isilon) Storage; HPE 3PAR StoreServ Storage While the cloud gateway has to talk with the managing Veeam Backup & Replication server over TCP ports 6168 and 6160, it has to be reached only with the single TCP/UDP port used by the service over the internet. Exact port numbers depend on the configuration of the Microsoft SQL server. Target Linux machine with PostgreSQL. Veeam backup server. In the gui of Server 2019 the firewall shows a reset button, when rules will be manually added to the firewall Aug 16, 2024 · Port. To do that, create firewall rules to connect to the address 169. May 5, 2023 · Below are convenient links to the most frequently accessed port lists for popular products. Veeam Agent computer. You can always just have a look at windows firewall to verify. Veeam Backup & Replication Ports; Veeam ONE Ports; Veeam Agent for Microsoft Windows Ports; Veeam Agent for Linux Ports; Ports 2500-3300 are dedicated to data transport. We would like to show you a description here but the site won’t allow us. Workers. Firewall Rules Aug 22, 2014 · Review the firewalls present in the environment to ensure accommodations have been made for the ports used by Veeam Backup & Replication. 49152 to Jan 10, 2025 · During installation, Veeam Backup & Replication automatically creates firewall rules for default ports to allow communication for the application components. exe (All traffic allowed for this program) No IP or port specifics. internal) through the ports TCP 80 and UDP 53, 123 Dec 5, 2023 · By default, during the deployment of Veeam Agent for Linux on a Linux machine by Veeam Backup & Replication, the services listed below use the default ports indicated. Backup repository. 10005. Veeam Cloud Connect: TCP-Port 6180 bis 6183: Wird für die Verbindung mit der Cloud-Infrastruktur genutzt. These rules allow communication between the components. We recommend using the Veeam Ports Mapper tool for this specific use case. Protocol. Veeam Data Mover ports are Port 2500 to 3300. Aug 14, 2012 · Veeam Community discussions and solutions for: Ports needed for NAS SMB Backup of File Shares and Object Storage May 11, 2021 · Allow access to the Google Cloud metadata server that stores backup appliance metadata, to the NTP server that provides accurate timing to the backup appliance, and to the Cloud DNS server. This port is used to provide faster Veeam Plug-in deployment. Veeam Backup for Microsoft 365 Server. Here are some examples of the most important ports: Veeam Backup & Replication: TCP port 10001 to 10300: These ports are used for communication between the Veeam backup server and the proxy servers and repositories. Port used for Microsoft Exchange web services connections. May 5, 2024 · I'm backing up a HyperV VM on a different subnet than B&R and with a stateful firewall traffic can be initiated from B&R to the VM on a different subnet. 04 and I would like to know how do you configure firewall on this system to allow only required port please ? If my research are correct, I could see I need only 22 + 6160 + 6162 port open and Veeam open the others when neededI think I understand the commands are differents Aug 13, 2019 · The new port range only applies to newly deployed components after Veeam Backup & Replication 10 is installed. You can find the lists of the ports in the following sections of the Veeam Backup & Replication User Guide: Backup Server Connections; Microsoft Windows Server Apr 7, 2015 · Hi, yesterday i open a call #04340072 for the same question. Check Managed Server Configuration. Apr 11, 2025 · On backup infrastructure components, Veeam Backup & Replication automatically creates firewall rules for the required ports. If an environment was upgraded from a version of Veeam Backup & Replication before 10, all existing components that were managed before the upgrade will continue to use 2500-5000. 1 backup console new firewall port 9420 requirement of Veeam Backup & Replication 12. Required to manage inbound/outbound traffic when interacting with Veeam Explorer for Microsoft Exchange. Backup server Jun 6, 2024 · I running Veeam for backup some remote equipment's files, but the Veeam server has installed ESET endpoint. The interface is divided into three sections, the first you are presented with is the following: Select the application group; Select the source you wish to get the ports from; Select the target you wish to get the ports to; Press ‘run’ to see the results. 169. This article documents how to change those default ports using registry settings on the Veeam Backup Server. 1 backup console new firewall port 9420 requirement - R&D Forums R&D Forums May 23, 2024 · Backup. I would like to know the exact ports required\used between backup servers (Veeam Managed Servers) and target VM (customer subnet). Feb 18, 2020 · Veeam proxy firewall ports. The following table describes network ports that must be open to ensure proper communication of workers with other backup infrastructure components. Diese Liste ist nicht vollständig, da verschiedene Veeam-Komponenten Mar 24, 2025 · Make sure to open port on the Veeam Backup for Microsoft 365 server. Veeam Backup Dec 9, 2021 · Today I received a message from a customer asking for a way to restore the firewall rules created during the installation. What connections are required from Veeam backup server to this mssql server, when I use a proxy in the network where the mssql server resides? I opened the database port (tcp_1433) from veeam backup server to mssql server. 10002, 10006. Veeam Agent Computer (Unix Feb 26, 2025 · Default port used by Veeam Agent for Microsoft Windows operating in the standalone mode for communication with the Veeam Backup server. Aug 15, 2024 · Port used to communicate with the installer service. The ports that Veeam requires depend on the specific components you use and how your IT environment is structured. Oct 3, 2024 · Veeam Backup for Proxmox VE automatically creates firewall rules for the ports required to allow communication between the Proxmox VE server, workers and the backup server. 6172. 6170. Veeam Backup for Microsoft 365 server. Sep 11, 2017 · MSSQL staging server is installed locally on veeam backup server. 254 (metadata. TCP. Data between the Veeam Agent computer and backup repositories is transferred directly, bypassing Veeam backup servers. Jan 16, 2015 · Restore speed doesn't go over 500 KB\s. You can find the lists of the ports in the following sections of the Veeam Backup & Replication User Guide: Backup Server Connections; Microsoft Windows Server Apr 2, 2025 · To learn what ports are required for other Veeam Backup & Replication components in the Veeam Cloud Connect infrastructure, see the Ports section in the Veeam Backup & Replication User Guide. Veeam Deployer Service (veeamdeployment) - Default Port: 6160 Jun 21, 2023 · # firewall-cmd --permanent --zone=veeamonly --add-port=6162/tcp --permanent Ok now we have made the zone but we have not activated it yet. Backup server, Veeam Backup & Replication console. To. These ports together with port 445 are mandatory to deploy the Distribution Server component. Dec 19, 2024 · Port 135 is optional. This one you can get from the Azure management portal. Because vulnerability is surrounding, which ports from FW I need to open for Veeam's backups? Any solution is helpful. xxx. Jan 7, 2025 · If you upgrade to Veeam Backup & Replication 10. When we start a job session, for each task we start VeeamAgent process. blob. Make sure to open this port on the Veeam Backup for Microsoft 365 server. Veeam Kasten Plug-in for Veeam Backup & Replication. Dec 28, 2014 · I've tried opening port 10001 up and i can connect to the Veeam server, however, when the client starts the backup it fails saying it can't connect to the server. For the full list of ports used for connections to the FLR helper appliance, see the Veeam Backup & Replication User Guide, section Used Ports. 49152 to 65535. Veeam Agent Computer (Linux) on EC2 Instance. Mount server. Feb 20, 2024 · And, when you install Veeam and its components (Proxies, Repos, etc), the installer already creates needed Windows f/w rules on the servers, as you can see from the Ports page in the Guide (see below): Veeam Ports. Port used by Veeam Agent for direct connection to the Jul 29, 2024 · Additionally, if you're using Veeam Backup & Replication, you may also need to open: 1. Feb 26, 2025 · Note: Ports 2500 – 3300 are required if during data transmission, the Veeam Data Mover Service is started on the Veeam backup server — for example, when the backup is targeted at the default backup repository of the Veeam backup server or when Veeam backup server acts as a gateway to the target backup repository. The first VeeamAgent process will start with Port 2500, the second will use Port 2501, Sep 4, 2024 · On backup infrastructure components, Veeam Backup & Replication automatically creates firewall rules for the required ports. Regards. 49152 to Jun 24, 2019 · Which ports must be opened on the firewall to allow access from my Veeam Backup server/software to a NAS device on the DR site ? The Veeam backup will be configured to make the normal backups on a local available NAS and do a copy of it to the DR site for. Jul 12, 2016 · For Veeam Backup for Microsoft 365, data transferred over port 443 (TCP) can be affected by this issue. Jul 6, 2023 · What are the ports and the protocol used by the Veeam backup server v12? I wanted to turn on my firewall, but don't want to cause the backup, replication or restore process to fail. net <-- The URL of your blob storage in Azure. Recommended dynamic RPC port range for Microsoft Windows Server 2008 or later. Mar 26, 2015 · You just have to open your firewall from your Veeam server to two hosts: 1. Make sure to allow incoming traffic on these ports in your Windows Firewall settings. Jun 17, 2024 · The following information of Veeam Kasten for Kubernetes services and network ports associated with them will help with port mapping and rules in a firewall VM environment or service mesh configuration. The problem is: I need to disable firewall in order to get a successful backup job. Ports used to communicate with Microsoft SQL servers hosting content databases. Feb 19, 2025 · Port. Ports used to deploy the runtime coordination process on the target machine. Staging server. 1433, 1434 and other. TCP, UDP. Within the Veeam console, click Backup Infrastructure Dec 16, 2024 · From. 135, 445. Obviously if you also have a device between your windows servers such as a physical firewall you will need to also manually open those same ports through it. Default port used by Veeam Agent for Microsoft Windows operating in the managed mode for communication with the Veeam Backup server. 2500 to 3300 TCP-Port 6160: Kommunikation des Backup-Agents mit dem Veeam-Backup-Server. COM+ Network Access: COM+ Network Access (DCOM-In) Network Discovery: Network Discovery (LLMNR-UDP-In) Required to gather CPU and memory performance data from Veeam Backup for Microsoft 365 servers. Data between the Veeam Agent for Linux computer and backup repositories is transferred directly, bypassing Veeam backup servers. google. Ports 137 to 139 are used by backup infrastructure components to communicate using NetBIOS. So theoretically, you shouldn’t need to manipulate your Windows f/w. 9404. The default range of transmission channel ports is available in the Used Ports section of the user guide. Feb 19, 2024 · hi veeam communityI want to turn on the firewall of the backup server and configure the firewallI have veeam backup and enterprise manager on my serverThe servers that are backed up are mostly on hyper-v cluster. By default, this port is 6180, but the service provider may customize this if customers have strict egress firewall rules. Veeam Enterprise Manager: TCP-Port 9392: Für die Webschnittstelle des Enterprise Managers. There are several physical servers, including SQL Server, which is also a cluster. 04. I really need this feature, too. Veeam Backup & Replication console and Veeam Backup & Replication and Veeam One server. TCP port 9392 (Veeam Backup & Replication) Please note that these ports are required for Veeam to communicate with your Windows servers. I believe it’s because backup\mount servers doesn't have access to the subnet to which file restore is being done. Ports 6160 and 11731 are used by the Veeam Installer Service. Oct 5, 2010 · Veeam Community discussions and solutions for: Hardened Ubuntu Repo: ufw firewall of Veeam Backup & Replication Jan 25, 2024 · Veeam Backup Server. Default ports used for communication with the Veeam backup server. In the Veeam ports list the 1058 is only required from Backup server to Windows server using vpower services We would like to show you a description here but the site won’t allow us. For more information on port ranges, find the relevant product or component user guide in the Help Center and consult the Used Ports page. Backup server. You can find the full list of the ports below. Backup server, Veeam Backup & Replication console, mount server associated with the backup repository (only for Instant Recovery or restore from Enterprise Manager) Target machine with Microsoft SQL Server, staging server. After doing a little research, I stumbled across a post on the Veeam R&D forum. Apr 18, 2025 · On backup infrastructure components, Veeam Backup & Replication automatically creates firewall rules for the required ports on Windows-based machines. Port used by Veeam Backup & Replication to connect to Kasten Plug-in for Veeam Backup & Replication. Used by the AHV Platform Service to enable communication with the Veeam Backup & Replication database. In this section, you can also find diagrams illustrating the interaction between Veeam Cloud Connect components and used ports in following scenarios: Dec 4, 2024 · The following table lists connection settings required for proper communication between Veeam ONE components, virtualization servers, VMware Cloud Director servers, Veeam Backup & Replication servers and Veeam Backup for Microsoft 365 servers. Apr 18, 2025 · On backup infrastructure components, Veeam Backup & Replication automatically creates firewall rules for the required ports on Windows-based machines. Mar 23, 2015 · Hello, I have the same issue for Linux FLR restore, the port 1058 is dropped by the FW between ESXi and the proxy making the vPowerNFS service. Port used for connections to the mount service. My que Feb 26, 2025 · Port. Is there a port range I can open on our firewall for the data transfer? Feb 29, 2012 · Veeam Community discussions and solutions for: Firewall ports and Endpoint Backup of Veeam Agent for Microsoft Windows May 3, 2017 · I'm backing up windows VM's from a customers network that is hosted on our private cloud platform to our Veeam platform and have a locked down rule on our Veeam platform firewall that only allows 10001 and 2500-5000 through, this allows the Veeam agent to backup to our platform without any problems at all, the problem with the 2500-5000 range May 31, 2023 · Required to collect events data from Veeam Backup & Replication servers. Jan 14, 2014 · Dear all, has anyone already figured out a minimum port/URL firewall forwarding rule list? In the VBO user guide, I can only see generic requirements like forwarding port 443 to "Microsoft Exchange Online" Mar 17, 2025 · Used to connect to the helper appliance during file-level restore. mkued hhgzn sacpo sln kslrrf tpqol xpfnuxq zbzbgwu podudh nldg dnnu lrjudl mggn noaxphn mku