Veeam backup firewall ports. Veeam Agent computer.

Veeam backup firewall ports Is this what I need to configure on the firewall? Backup server/repository >>> Backup proxy TCP&UDP 135, 137-139, 445 TCP 2500-3300 Sep 4, 2024 · On backup infrastructure components, Veeam Backup & Replication automatically creates firewall rules for the required ports. Oct 11, 2024 · In addition to general port requirements applicable to a backup server, the following network ports that must be opened to enable proper communication between Veeam Backup & Replication components. Well if you look here - Ports - User Guide for VMware vSphere (veeam. Diese Liste ist nicht vollständig, da verschiedene Veeam-Komponenten May 31, 2023 · Required to collect events data from Veeam Backup & Replication servers. For such setup you would need to keep port 10005 opened as was mentioned in Agent Management guide. Bu araç, karmaşık ağ ortamlarında Veeam çözümünün doğru çalışması için firewall ayarlarının doğru Jul 25, 2020 · Hi, yesterday i open a call #04340072 for the same question. Default range of ports used for managing data transfer during restore to the original (remote) machine or another Linux machine with Jun 21, 2023 · # firewall-cmd --permanent --zone=veeamonly --add-port=6162/tcp --permanent Ok now we have made the zone but we have not activated it yet. TCP. 10001. This port is used by the Veeam Guest Catalog Service to replicate catalog data from backup servers to Veeam Backup Enterprise Manager. 2. When we start a job session, for each task we start VeeamAgent process. . Microsoft Active Directory machine. You can always just have a look at windows firewall to verify. Backup server Jun 23, 2017 · There we need only port 443 (and in some older versions of the applications TCP port 80). Bind the firewall rule to all Veeam proxy server data network IPs. I have the ports listed under "Windows Server Connections" open from the backup server to the guest interaction proxy. Default port used for communication with the Veeam backup server. May 5, 2023 · Use the following PowerShell command to check which process is locking a specific port. It is recommended to restrict open ports to only essential services in each zone. By default, port 9393 is used. Port. At Log Backup we start a Veeam service to do so. Catalog service port. Feb 19, 2024 · hi veeam communityI want to turn on the firewall of the backup server and configure the firewallI have veeam backup and enterprise manager on my serverThe servers that are backed up are mostly on hyper-v cluster. Target Microsoft Exchange 2013/2016/2019 CAS server. Veeam Agent computer. Port used for Microsoft Exchange web services connections. exe. Aug 15, 2024 · Port. We normally do that with telnet. In this example, the port is owned by the VeeamDeploymentSvc process. You can find the lists of the ports in the following sections of the Veeam Backup & Replication User Guide: Backup Server Connections; Microsoft Windows Server Mar 9, 2015 · I've tried opening port 10001 up and i can connect to the Veeam server, however, when the client starts the backup it fails saying it can't connect to the server. These ports together with port 445 are mandatory to deploy the Distribution Server component. Backup server, Veeam Backup & Replication console, mount server associated with the backup repository (only for Instant Recovery or restore from Enterprise Manager) Target Windows machine with Oracle, staging server. Yet, the “waiting for log shipping server” is dominantly the longest operation in backup : Apr 2, 2024 · Nodes and ports seem to be already isolated: the sources are our ESXis, source ports are in the 50300-50400 range, destination - Veeam B&R v. TCP, UDP. backup. But in general you need to have access to the ESXi hosts to process backup overall (and VIX based Guest processing): Backup Server and Proxy Server need acces by TCP 443 to vcenter and by TCP 443 + TCP 902 to the ESXi host. Oct 3, 2024 · Veeam Backup for Proxmox VE automatically creates firewall rules for the ports required to allow communication between the Proxmox VE server, workers and the backup server. 2 to 12. I believe it’s because backup\mount servers doesn't have access to the subnet to which file restore is being done. Regards. This KB describes the possible options of enabling the rules. Dec 16, 2024 · From. What kind of backup job have you configured and what are you using as a target backup repository? (A) Hyper-V VM guest backup and Veeam Server Local disk repository. Veeam Explorer for Microsoft Exchange. Veeam Backup for Microsoft 365 server. Protocol. Backup server, Veeam Backup & Replication console, mount server associated with the backup repository (only for Instant Recovery or restore from Enterprise Manager) Target machine with Microsoft SQL Server, staging server. 636, 3268, 3269. If the backup server is deployed as a part of the Mine cluster, the necessary ports are opened automatically. Jun 6, 2024 · I running Veeam for backup some remote equipment's files, but the Veeam server has installed ESET endpoint. Mar 4, 2025 · On backup infrastructure components, Veeam Backup & Replication automatically creates firewall rules for the required ports on Windows-based machines. But when it's time for the VM to transfer SQL transaction logs, it seems the VM wants to initiate that traffic to B&R, which the VM is currently not allowed to do. Default port used by Veeam Agent for Microsoft Windows operating in the standalone mode for communication with the Veeam Backup server. Backup. Jul 29, 2024 · To enable Veeam backups for your Windows servers, you'll need to open the following ports in your Windows Firewall: 1. This article documents how to change those default ports using registry settings on the Veeam Backup Server. 49152 to Dec 17, 2024 · Used to connect to the helper appliance during file-level restore. This design assumes that all connections between security zones are denied unless explicitly allowed via a firewall rule. Jan 15, 2025 · In the Veeam ONE agent port field, type a number of the port that Veeam ONE Agent will use to collect data from connected Veeam Backup & Replication servers. Veeam Agent Computer (Linux) on EC2 Instance. Backup repository. When the Guest Interaction Proxy connects to a Windows 2012 R2 VM (client) to run VSS for application aware backups there is a file uploaded being renamed to C:\WINDOWS\VeeamVssSupport\VeeamGuestHelper. With Linux OS, you may need to. Depending on the repository type, you should open the ports for communication with the source proxy and also those required for communication with Windows or Linux server, depending on the platform used. 20443. The following table describes network ports that must be open to ensure proper communication of workers with other backup infrastructure components. 6180. For more information on Enterprise Manager network connectivity, refer to the Enterprise Manager article of the Veeam Backup and Replication Best Practices documentation. Jun 15, 2024 · The help center article you have shared talks about "automatically opens ports used by the Veeam Data Mover". For more information, see this Microsoft Dec 20, 2015 · We are currently implementing new firewall rules and I'm seeing connections that I can not see in Veeam's used ports documentation. you need to tell the rpc server not to use any available port out of this pool but rather use a defined range of ports. Setup: Linux Agent: Centos 6 2. 49152 to 65535. This scenario is different however. Feb 5, 2011 · Veeam Community discussions and solutions for: Guest File Indexing - Possible Without RPC? of Veeam Backup & Replication Jun 23, 2022 · Hi, I want to finally lean how to create a rule on a Cisco ASA GUI interface to block traffic coming from outside to inside of our company that blocks only port range 2500 to 3300 which are the ports used for Veeam Backup. Check the firewall ports configuration according to the requirements . To. The nasty part is, where the backup agent tries to connect itself. this range is Feb 18, 2020 · Hi, On my VBR server I want to have (only) ports open for the protocols for the website(s) on the internet that make my Veeam life easy , so for downloading the Veeam installation files for example, downloading Veeam updates but also for creating a Veeam support ticket (if necessary) and uploading Veeam log files. windows. 254 (metadata. 443. 310, done today). This need an extra port 6167 and the Veeam Standard Transport Ports TCP2500-5000. Backup server. com) the port 902 is a required port for communication from VBR to ESXi. 10002, 10006. Depending on the type of backup repositories that you use for Veeam Plug-in backups, the following ports must be open to allow communication between backup Feb 16, 2010 · Yes, the correct credentials were supplied. So theoretically, you shouldn’t need to manipulate your Windows f/w. Default port used by Veeam Agent for Microsoft Windows operating in the managed mode for communication with the Veeam Backup server. Manages communication between the domain controller and the backup server. Seems like it replaces the 135, 137-139, 445 ports? Jan 11, 2019 · Please advise how to configure the Windows Firewall to permit SQL database restores to a SQL server. Enable the new firewall rule: esxcli network firewall ruleset set -r "VeeamCiscoFirewall" -e true -a false 8. 1 backup console new firewall port 9420 requirement of Veeam Backup & Replication 12. Nov 5, 2020 · Hello, for VMware Tools Quiescense (Job - Storage - Advanced - VMware) you do not need any special network connection. Jan 28, 2010 · in simple words: the veeam backup server initiates rpc communication with the vm through one port, but the rpc server on the vm responds on a different port which is taken from a pool of available ports. Aug 13, 2019 · The new port range only applies to newly deployed components after Veeam Backup & Replication 10 is installed. Dec 19, 2024 · Port 135 is optional. 10005. TCP port 9392 (Veeam Backup & Replication) Here are some examples of the most important ports: TCP port 10001 to 10300: These ports are used for communication between the Veeam backup server and the proxy servers and repositories. Jan 14, 2022 · Veeam Community discussions and solutions for: Upgrade of VBR to 12. Veeam Agent for Oracle Solaris machine Sep 23, 2022 · Veeam Community discussions and solutions for: Particular Firewall rules needed for Restore Portal of Veeam Backup for Microsoft 365 Dec 5, 2024 · Most of the time, the log backup job is stuck on “waiting for log shipping server”. 6172. Veeam Enterprise Manager: TCP-Port 9392: Für die Webschnittstelle des Enterprise Managers. i. Workers. In the Certificate list, choose a certificate that will be used to secure traffic between the web browser, Veeam ONE Web Services and Veeam ONE Reporting Dec 16, 2024 · From. 1536 does not recognize PasswordAuthentification on the target system is not allowed but prints out a very confusing message instead: "Host rescan is required" when waiting for rescan job and unable to process the backup. Feb 19, 2025 · Port. Sep 7, 2017 · The following registry value may be used to force the Veeam Agent for Microsoft Windows service to start on a specific port. Staging server. I noticed that on our Linux hosts the configured firewall set or rules change after the upgrade (say upgrading from 12. What connections are required from Veeam backup server to this mssql server, when I use a proxy in the network where the mssql server resides? I opened the database port (tcp_1433) from veeam backup server to mssql server. 2500 to 3300. Because vulnerability is surrounding, which ports from FW I need to open for Veeam's backups? Any solution is helpful. service. Restart the linux server and the rules are automatically added. In the gui of Server 2019 the firewall shows a reset button, when rules will be manually added to the firewall Mar 20, 2018 · Veeam Community discussions and solutions for: Veeamagent open ports during backup of Veeam Agents for Linux, Mac, AIX & Solaris Jan 12, 2024 · 1. I know that mount server provides powerNFS for instant restore etc. 9404. Key Location: HKLM\SOFTWARE\Veeam\Veeam Endpoint Backup\ Value Name: EndPoint_Rpc_Transport_Port Jan 30, 2025 · As Veeam Backup for Microsoft Entra ID is installed on the same machine where Veeam Backup & Replication runs, it also uses the same ports as those described in the Ports section in the Veeam Backup & Replication User Guide. Feb 3, 2025 · To learn what ports are required for other Veeam Backup & Replication components in the Veeam Cloud Connect infrastructure, see the Ports section in the Veeam Backup & Replication User Guide. Currently it only has VMware and Hyper-V ports; however, that will be changing soon and will have: VMware; Hyper-V; AHV; Enterprise Jan 25, 2024 · For more information about Veeam Backup Enterprise Manager used ports, see Ports. Oct 5, 2010 · Veeam Community discussions and solutions for: Hardened Ubuntu Repo: ufw firewall of Veeam Backup & Replication Aug 26, 2024 · For every TCP connection that a job uses, one port from this range is assigned. Target Linux machine with PostgreSQL. I have turned on VMWare Tools Quiescence and turned off Veeam VSS and it works fine. Ports used to communicate with Microsoft SQL servers hosting content databases. we have new firewall policies, i try to set firewall rules for Veeam Backup & replication 8. Default port used for communication with the Veeam Agent for Microsoft Windows Service. Nov 17, 2023 · On backup infrastructure components, Veeam Backup & Replication automatically creates firewall rules for the required ports. 04. For AD restore we need the LDAP ports. TCP Aug 15, 2024 · Port used to communicate with the installer service. You can find the full list of the ports below. Turning the firewall OFF allows the restore to proceed, but my preference is either: For the Veeam software to open the firewall ports it needs by itself, just like it says in the manual. Default port used for communication with the Veeam Cloud Connect Service and Veeam Cloud Connect-side network redirector(s). Depending on the deployment scenario you choose, additional configuration actions may be required. All in- and outbound traffic are blocked, but those explicitly allowed. Directing only 49152/65535 didn't work. The way to activate it is by reloading the rules from disk Sep 27, 2022 · The cache is being used intensively during every backup run to compare the source data with the target data. Feb 29, 2012 · Veeam Community discussions and solutions for: Firewall ports and Endpoint Backup of Veeam Agent for Microsoft Windows Oct 23, 2024 · Port used for communication with the Veeam Backup Service. Feb 18, 2020 · Veeam proxy firewall ports. Those drops only appear while the backup is running? (A) Yes, detected by the PA Firewall. The process outlined below applies to all HyperFlex clusters running HX Dat Backup server is a Windows 7 machine, destination proxy another Windows 7 machine. 10006. net <-- The URL of your blob storage in Azure. We want to block this so the users working outside of company IP ranges ca Mar 24, 2010 · Has anyone created a script to open the ports required by veeam to backup a virtual machine. However, by default telnet client is not installed during Windows Server and the Vee Dec 18, 2023 · At the Port Configuration step of the wizard, specify connection settings for Veeam ONE Monitoring Service. exe Testing was performed using PowerShell from a machine that should be blocked from connecting via Veeam Console to the VBR. The previous person in the job had allowed the firewall traffic through with no restrictions and this issue happened when I tightened up the firewall rules. 389. Dec 26, 2019 · To process a Veeam backup from storage snapshot with Cisco HyperFlex IOvisor, you have to change the ESXi firewall settings. Feb 4, 2019 · Enter backup server port number [10006]: 10006 Enter username: vsadmin Enter password for vsadmin: Failed to connect to the port [11. Aug 8, 2019 · 2) Veeam Backup Management Service (In) - c:\program files\veeam\backup and replication\backup\veeam. Update the -LocalPort value to specify the port being tested. el6. Have you tried as a preparation to open the necessary ports on your production VM? The connection tester runs on the backup server. Feb 6, 2024 · In the Audit Zone, monitoring solutions such as Veeam ONE, IDS, and IPS systems should be positioned to enhance oversight and surveillance. May 3, 2017 · I'm backing up windows VM's from a customers network that is hosted on our private cloud platform to our Veeam platform and have a locked down rule on our Veeam platform firewall that only allows 10001 and 2500-5000 through, this allows the Veeam agent to backup to our platform without any problems at all, the problem with the 2500-5000 range While the cloud gateway has to talk with the managing Veeam Backup & Replication server over TCP ports 6168 and 6160, it has to be reached only with the single TCP/UDP port used by the service over the internet. Jul 30, 2018 · Sometimes it is impossible to enable the necessary Firewall rules required by Veeam ONE using Windows Firewall UI. Provide HTTP and HTTPS port numbers. This registry value should be created on the machine where Veeam Agent for Microsoft Windows is installed. 4:10006]. Port used for communication with the Veeam Backup Service. I suggest starting with opening the ports used by the data mover service for data transmission. I'm reading some other stuff here but I don't really like the idea of such a long range of ports open. 254. Nov 7, 2012 · If I understand you right, it will be a repository server rather than a proxy server. Jan 25, 2024 · Veeam Backup Server. My head wanted two Veeam-servers to communicate through the WAN-accelerator-port only. There are several physical servers, including SQL Server, which is also a cluster. 2500 to 3300 Jul 14, 2014 · Allow Rule: C:\Program Files (x86)\Veeam\Backup Transport\x86\VeeamAgent. using NetSh \ Set-NetFirewallProfile Don't want to recreate the wheel if someone already did it Restore speed doesn't go over 500 KB\s. xxx. Firewall Rules Jul 26, 2018 · Noted, in order to use agent managed by backup server you should create protection group for the desired scope of machines and deploy agents via Veeam B&R server. exe (All traffic allowed for this program) No IP or port specifics. This port is used to provide faster Veeam Plug-in deployment. Veeam Backup Feb 2, 2017 · I've noticed the default firewall for server 2016 and windows 10 isn't letting my veeam inject it's service. The first VeeamAgent process will start with Port 2500, the second will use Port 2501, Mar 11, 2019 · You just have to open your firewall from your Veeam server to two hosts: 1. internal) through the ports TCP 80 and UDP 53, 123 Per the documentation you linked, (at the top) veeam should automatically add all required ports in windows firewall. Backup server; Cache repository; Backup repositories Nov 4, 2024 · Veeam Ports Finder Tool, Veeam Backup & Replication çözümünde kullanılan farklı bileşenler arasında iletişim kurmak için gerekli olan tüm portları tek bir yerde toplamayı amaçlayan kullanışlı bir araçtır. I will turn Veeam VSS back on when we go to v5. Dec 13, 2024 · Hello,I’m using Ubuntu 24. In the Veeam ONE monitoring service port field, type a number of the port that will be used to interact with Veeam ONE Monitoring service. Exact port numbers depend on the configuration of the Microsoft SQL server. May 19, 2022 · Veeam Agent Computer. Is there a port range I can open on our firewall for the data transfer? Aug 16, 2024 · Port. My que Nov 14, 2020 · This port designation is correct as of August 2020. Veeam Backup service port. What is the best way to allow this, IP Address from AWS changed every time, so i cannot create a rule for this on a static IP. Ports 6160 and 11731 are used by the Veeam Installer Service. Veeam Backup & Replication console and Veeam ONE server. Ports used for establishing an HTTPS connection to SAP Web Services. It is a massive attack surface available :/ Jul 5, 2023 · I’ve seen VBR have port exhaustion exactly once before, that was a VCC installation and the firewall was half-closing sessions and Veeam wasn’t doing a good job detecting this and freeing up ports subsequently. For more information, see this Microsoft Dec 28, 2018 · If StoreOnce Catalyst operations pass through a firewall, the network administrator must open (TCP) ports 9387 (Command protocol) and 9388 (Data protocol). 49152 to Jun 17, 2024 · The following information of Veeam Kasten for Kubernetes services and network ports associated with them will help with port mapping and rules in a firewall VM environment or service mesh configuration. Jun 9, 2021 · The idea behind the tool was to make it easier to find all the ports you need for a Veeam solution. Jun 1, 2023 · Veeam Community discussions and solutions for: Firewall ports between Veeam BR, ESX, Host-based backup of VMware vSphere VMs. To do that, create firewall rules to connect to the address 169. Sep 11, 2017 · MSSQL staging server is installed locally on veeam backup server. 4 Enter backup server port number [10006]: 5001 May 11, 2018 · After it, I execute “ufw enable” to enable the integrated firewall with Ubuntu 24. Sep 6, 2022 · During troubleshooting a backup environment, it’s common the necessity of test ports responsivity of our backup servers, like Veeam backup server, mount server, proxy or repositories. Veeam Cloud Connect: TCP-Port 6180 bis 6183: Wird für die Verbindung mit der Cloud-Infrastruktur genutzt. For detailed list of ports used by Veeam Backup & Replication server and backup repositories, see the Used Ports section in the Veeam Backup & Replication User Guide. Veeam Backup Server. Data between the Veeam Agent for Linux computer and backup repositories is transferred directly, bypassing Veeam backup servers. By default, this port is 6180, but the service provider may customize this if customers have strict egress firewall rules. In the Veeam ports list the 1058 is only required from Backup server to Windows server using vpower services Aug 31, 2015 · While the SureBackup/Instant Recovery is running, the disk is mounted with the help of the data mover service on the backup repository server and Hyper-V server. Nov 22, 2024 · The following table describes network ports that must be opened to ensure proper communication with object storage if you back up data to object storage directly or to object storage added as a Veeam backup repository with the direct connection mode. Veeam Kasten Plug-in for Veeam Backup & Replication. Recommended dynamic RPC port range for Microsoft Windows Server 2008 or later. The default port number is 2805 . 0 from earlier versions of the product, the range of ports from 2500 to 5000 applies to the already added components. Apr 23, 2019 · Yes in this case it is Hyper-V, though I assume the ports would be the same regardless. Veeam Data Mover ports are Port 2500 to 3300. core. The aim is to reduce the amount of effort there is in identifying the ports required between different components. Remote Access Console (Internet) Cloud gateway. The default port number is 2714. This tool was developed to simplify the identification of ports required by Veeam software. Data between the Veeam Agent for Oracle Solaris machine and backup repositories is transferred directly, bypassing Veeam backup servers. Dec 4, 2024 · The following table lists connection settings required for proper communication between Veeam ONE components, virtualization servers, VMware Cloud Director servers, Veeam Backup & Replication servers and Veeam Backup for Microsoft 365 servers. 7. TCP port 445 (SMB/CIFS) 3. If you are installing Veeam Cloud Connect Portal, you can also specify a port number that will be used by browser to access its website (the default port is 6443 ). In this example, no process is associated with the specified port. For a complete list of the required network ports, please refer to the network diagram and the additional general required ports in the Veeam Backup & Replication User Guide. Obviously if you also have a device between your windows servers such as a physical firewall you will need to also manually open those same ports through it. So as of now I'm disabling the firewall, running the backup once, then enabling the firewall. google. Mar 4, 2025 · On backup infrastructure components, Veeam Backup & Replication automatically creates firewall rules for the required ports on Windows-based machines. Mount server. I decided to have a go at manually configuring all rules and have a GP for Proxies, GP for Repo, GP for B+R etc with ports and IPs from the Veeam Ports Doc but I have got myself into a bit of a mess and am Nov 29, 2024 · Make sure to open port on the Veeam Backup for Microsoft 365 server. 9194. 1 backup console new firewall port 9420 requirement - R&D Forums R&D Forums Feb 18, 2014 · Veeam Community discussions and solutions for: What ports to open in my firewall if using CloudConnect+R of Veeam Backup & Replication Jan 10, 2025 · Hi all, I'm searching a confirmantion about the Port 6160/TCP destiny on a (Linux) hardened Backup Repository just after a Veeam B&R upgrade (say moving from 12. To fix this, I had to manually recreate firewall rules that were initially created automatically when we added the repository server to our Veeam B&R console. 6160 + 6162 are added and then it dynamically add the 2500-3000 as needed during the backup. This one you can get from the Azure management portal. Oct 8, 2013 · The firewall on our repository server mistakenly got "reset" and Veeam backups stopped working. 0. 49152 to 65535 (for Microsoft Windows Server 2008 or later) Feb 6, 2019 · We are trying to backup workstations to our VBR server. We have problems configuring our workstation firewall to allow Veeam backup agent. Some errors occurred while applying configuration. TCP Port 443 needs to be opened from all Veeam Backup and VMware Backup Proxy servers as a Source with the vCenter internal IP as a target. Firewall Ports . I really need this feature, too. Oct 6, 2016 · I'm working with a very security oriented setup with UAC, AppLocker, Windows firewalls overridden by central policies and network firewalls. TCP port 135 (RPC) 2. TCP port 902 (Veeam Data Mover) Additionally, if you're using Veeam Backup & Replication, you may also need to open: 1. 4 posts • Page 1 of 1. Jun 7, 2017 · 6. Dell VNX(e) Storage; Dell Unity XT, Unity Storage; Dell PowerScale (Formerly Isilon) Storage; HPE 3PAR StoreServ Storage Nov 5, 2024 · Port. Opening these ports allows the StoreOnce Catalyst traffic to pass to and from the StoreOnce Systems. TDG Dec 4, 2024 · As AWS Plug-in for Veeam Backup & Replication is installed on the same machine where Veeam Backup & Replication runs, it uses the same ports as those described in the Veeam Backup & Replication User Guide, section Ports. My configuration was looking like this: domain controller wi01: firewall currently switched off (I know it's bad) veeam-Server outbound traffic is allowed On backup infrastructure components, Veeam Backup & Replication automatically creates firewall rules for the required ports on Windows-based machines. #1 Global Leader in Data Resilience May 29, 2019 · So starting from a client with newly installed Windows Server 2019, with default Windows firewall configuration and a VEEAM server with Windows Server 2016 (veeam has installed the Guest Interaction Proxy on this server by default), I have to create a client rule for open traffic coming from the 2016 server on ports: 135, 137, 139, 445 (6190, 6290 are not necessary). Feb 13, 2024 · On your NAT gateway, configure the port forwarding rule for TCP and UDP protocols: from an incoming port (specified in the External port field at the previous step of the wizard) to the port on the local network used for listening to connections (specified at the Incoming port field at this step of the wizard). The following diagram shows the flow of data with the major firewall ports. TCP: 9401 [Remote console only] Port used by the Veeam Backup & Replication console during Windows file-level recovery. I have also allowed ports 2500-3300 in the different direction (from MS SQL server to Veeam) on the network firewall. Do you want to restart the wizard? (Y/n): Y Enter backup server name or IP address: 11. x86_64 Dec 9, 2021 · Today I received a message from a customer asking for a way to restore the firewall rules created during the installation. 3. In this section, you can also find diagrams illustrating the interaction between Veeam Cloud Connect components and used ports in following scenarios: Jul 12, 2016 · For Veeam Backup for Microsoft 365, data transferred over port 443 (TCP) can be affected by this issue. Default ports used for communication with the Veeam backup server. The latest list of ports for all services and APIs can be found in the Helpcenter User Guide. 334 to 12. 169. Nov 30, 2023 · For more information about Veeam Backup & Replication ports, see Ports. 1 with Hardened Repo of Veeam Backup & Replication Jul 19, 2016 · I am currently working on the firewall settings and yesterday I tried to create the rules I need for an active directory object restore. 1129, 5<xx>14 where <xx> is the number of the instance. TCP/HTTPS. Ports used to deploy the runtime coordination process on the target machine. Jul 24, 2023 · バックアップインフラストラクチャのコンポーネントでは、Veeam Backup & Replicationによって、必要なポートについてファイアウォールのルールが自動的に作成されます。これらのルールにより、コンポーネント間の通信が可能になります。 ポートのリストは、Veeam Backup & Replicationユーザーガイド の Aug 22, 2013 · Thanks! I've just reached that conclusion myself. COM+ Network Access: COM+ Network Access (DCOM-In) Network Discovery: Network Discovery (LLMNR-UDP-In) Required to gather CPU and memory performance data from Veeam Backup for Microsoft 365 servers. Make sure to open this port on the Veeam Backup for Microsoft 365 server. Directing 1024/65535 worked, but this is a hell of a long range of ports. On proxy I have main network with default gateway on ESXi management network and second network, without default gateway on backup vlan, but I have doubts that proxy sends data to the repository using Jan 25, 2024 · Disabling firewall works only for Windows machines. Feb 7, 2025 · Required to access Azure storage accounts when creating backup repositories using Microsoft Azure Plug-in for Veeam Backup & Replication. Data between the Veeam Agent computer and backup repositories is transferred directly, bypassing Veeam backup servers. 6170. 11 appliance, port 902. The firewall guy also wants this Still a bit puzzled by the 6164-port, though. 5. Aug 15, 2024 · Port used to communicate with the installer service. e. Refresh the firewall rules for the changes to take effect by running the command: esxcli network firewall refresh 7. Required to manage inbound/outbound traffic when interacting with Veeam Explorer for Microsoft Exchange. Next step would be to configure backup job (which in you case can be managed by agent). UIService process for managing database connections. 3, as example). Port used by Veeam Backup & Replication to connect to Kasten Plug-in for Veeam Backup & Replication. Apr 10, 2017 · On the Veeam Backup and Replication server, verify this account and the Veeam ONE service account are added to the Administrators group in Local Systems and Groups. After doing a little research, I stumbled across a post on the Veeam R&D forum. Jan 25, 2011 · Veeam Community discussions and solutions for: 12. So you have to open ports required for the data mover services to talk to each other. Jun 11, 2024 · Port. Please see the Helpcenter for a complete list of the firewall ports. For example: random ESXi hosts to Veeam Windows proxy/mount servers ports 111 (NFS/portmapper). Certificate Revocation Lists. Oct 23, 2024 · Ports used by the Veeam Backup & Replication console to communicate with the backup server. In addition, AWS Plug-in for Veeam Backup & Replication also uses ports listed in the following table. Per the documentation you linked, (at the top) veeam should automatically add all required ports in windows firewall. SQL restore (and SQL Log Shipping) is a bit more complex. Ports 137 to 139 are used by backup infrastructure components to communicate using NetBIOS. TCP-Port 6160: Kommunikation des Backup-Agents mit dem Veeam-Backup-Server. Veeam Deployer Service (veeamdeployment) - Default Port: 6160 Dec 14, 2017 · NSX-t allows VMC customers to directly access the management network over the built-in firewall. 04 and I would like to know how do you configure firewall on this system to allow only required port please ? If my research are correct, I could see I need only 22 + 6160 + 6162 port open and Veeam open the others when neededI think I understand the commands are differents Nov 28, 2011 · Servers Protocol Port/s Need Env A Veeam / Env B vCenter HTTPS+TCP 443 Connections to vCenter Server Env A Veeam / Env B Veeam TCP 2500-5000 Transmission channels for replication jobs Env A Veeam / Env B Veeam TCP 6061 Veeam vPower NFS Service Env A Veeam / Env B Veeam TCP 6062 Veeam Data Mover Service Jun 24, 2019 · Which ports must be opened on the firewall to allow access from my Veeam Backup server/software to a NAS device on the DR site ? The Veeam backup will be configured to make the normal backups on a local available NAS and do a copy of it to the DR site for. blob. Backup Appliance The following table describes network ports that must be open to ensure proper communication of the backup appliance with other backup infrastructure Jan 7, 2025 · On backup infrastructure components, Veeam Backup & Replication automatically creates firewall rules for the required ports. If you are using a third-party firewall, these rules must be created manually. Operator wrote: ↑ Thu May 23, 2024 6:36 am Before enabling the Windows Server firewall on all of my Veeam Backup servers, what are the ports or the rule I must manually add under: Code: Select all Feb 20, 2024 · And, when you install Veeam and its components (Proxies, Repos, etc), the installer already creates needed Windows f/w rules on the servers, as you can see from the Ports page in the Guide (see below): Veeam Ports. 0, exact for License Update checks, Veeam B&R tryes to open connection to AWS. 32-642. What is the Ports List Finder? The tool brings together all the required ports from all the various Veeam Help Center pages into a single location. For more information on port ranges, find the relevant product or component user guide in the Help Center and consult the Used Ports page. thanks, John May 11, 2021 · Allow access to the Google Cloud metadata server that stores backup appliance metadata, to the NTP server that provides accurate timing to the backup appliance, and to the Cloud DNS server. Port used to connect to Microsoft Azure Plug-in for Veeam Backup & Replication. TCP port 6160: Communication of the backup agent with the Veeam backup server. The problem is: I need to disable firewall in order to get a successful backup job. 2. These rules allow communication between the components. but repository is on different - backup vlan. Aug 14, 2012 · Veeam Community discussions and solutions for: Ports needed for NAS SMB Backup of File Shares and Object Storage Nov 28, 2024 · Veeam Backup for OLVM and RHV automatically creates firewall rules for the ports required to allow communication between the backup appliance, workers and the backup server. SAP Web Services. You can find the lists of the ports in the following sections of the Veeam Backup & Replication User Guide: Backup Server Connections; Microsoft Windows Server Jan 10, 2025 · During installation, Veeam Backup & Replication automatically creates firewall rules for default ports to allow communication for the application components. 135, 445. 10003. Veeam Backup for Microsoft 365 Server. It doesn’t provide mapping for specific hosts or any of the advanced feature that the Veeam Ports Tool provides. Communication with Veeam Backup & Replication Repositories. Apr 25, 2017 · Ports 2500-5000 have an IPTABLES rule to allow forward traffic between devices, as well as a rule for 10002 for the backup agent. If an environment was upgraded from a version of Veeam Backup & Replication before 10, all existing components that were managed before the upgrade will continue to use 2500-5000. Jun 16, 2023 · Mine with Veeam uses specific ports to allow communication between the solution components. Jan 7, 2025 · If you upgrade to Veeam Backup & Replication 10. For the full list of ports used for connections to the FLR helper appliance, see the Veeam Backup & Replication User Guide, section Used Ports. 6. Greetings Apr 10, 2015 · The most annoying circumstance is Veeam Backup & Replication server 9. Veeam backup server. Management zone Mar 12, 2021 · Esxi management ports are on 10Gbit/s, so is proxy I have created for this on this management vlan. Nov 20, 2023 · Port. Mar 23, 2015 · Hello, I have the same issue for Linux FLR restore, the port 1058 is dropped by the FW between ESXi and the proxy making the vPowerNFS service. Somehow he managed to reset the Windows firewall back to default which wiped all custom rules including the Veeam ones. These need to be operational on your firewall between each component of Veeam Backup and Replication infrastructure when you choose to use them How to use this tool Prepare. Used for LDAP connections. Used by the AHV Platform Service to enable communication with the Veeam Backup & Replication database. Data consistency check May 5, 2024 · I'm backing up a HyperV VM on a different subnet than B&R and with a stateful firewall traffic can be initiated from B&R to the VM on a different subnet. Notes. Oct 31, 2022 · Backup. Note that both ports are required. I would like to know the exact ports required\used between backup servers (Veeam Managed Servers) and target VM (customer subnet). Dec 5, 2023 · By default, during the deployment of Veeam Agent for Linux on a Linux machine by Veeam Backup & Replication, the services listed below use the default ports indicated. Backup server, Veeam Backup & Replication console. TCP: 9396: Port used by the Veeam. Configure the firewall to allow connections from the backup server to the Apache Server. For the connections initiated by the guest interaction proxy to the backup repository, would it only be 2500-5000? Jul 2, 2021 · As per the VBO Used Ports link it shows "Veeam Backup for Office 365 Components" to Veeam Backup for Office 365 Server thru port 9191. 1433, 1434 and other. Can anyone explain to me what does Veeam Backup for Office 365 Components here referring to? Is it VBO Proxy server? Or is it the Microsoft Office 365 URL/IP address range? Jul 6, 2023 · What are the ports and the protocol used by the Veeam backup server v12? I wanted to turn on my firewall, but don't want to cause the backup, replication or restore process to fail. Port used for connections to the mount service. Veeam Backup & Replication console and Veeam Backup & Replication and Veeam One server. Sep 4, 2024 · On backup infrastructure components, Veeam Backup & Replication automatically creates firewall rules for the required ports. Jun 18, 2024 · Veeam backup server. ide hbmu rfuqb geruxg vlrpy fiehq fkhu lalikl eftxce ezpaw rznsb prcux dejlsl vef hwhtg