Veeam firewall ports windows Mar 20, 2025 · To learn what ports are required for other Veeam Backup & Replication components in the Veeam Cloud Connect infrastructure, see the Ports section in the Veeam Backup & Replication User Guide. 6 days ago · Ports used by the Veeam Backup & Replication console to communicate with the backup server. With Linux OS, you may need to. up to now i was able to add all other servers in the infrastructure (one more physical server 2012 r2, some VM servers 2012 r2 and a Azure file server 2019) without any issue. Adding server public IP and hostname to Windows host file. Veeam Backup Agent computer (Windows) TCP. Dec 9, 2021 · Somehow he managed to reset the Windows firewall back to default which wiped all custom rules including the Veeam ones. 1. Jan 4, 2017 · Perry, The firewall rules are created on the Backup & Replication server. Dec 19, 2024 · Default port used for communication with Veeam Plug-in. butler. We use Veeam Agent for Windows to backup those clients. Is this technically possible and supported with VEB ? Big question, what ports should be forwarded / opened between laptop <> Internet <> B&R server (suppose all Veeam components are installed on the B&R server) ? Apr 7, 2015 · A few times now, I have run into a situation where I want to reset the Windows firewall to default to try and eliminate a symptom, but I am loath to do that because I would have to recreate all the Veeam firewall rules. ). domain. Port used to communicate with the Apr 21, 2015 · I have read several guides and we are still struggling to get this set up. For every TCP connection that a backup job uses, one port from this range is assigned. I find it an acceptable workaround to have a fast solution. For more information, see this Microsoft KB article. Mount server. But that's a configuration in the windows OS itself. Veeam Backup service port. Not sure what firewall you have, but nearly every NGFW will allow you to view traffic analysis from point to point. You signed out in another tab or window. TCP Jan 7, 2025 · Port used as a control channel from the Veeam Plug-in server to the target Linux host. For more information on the Veeam SQL Restore Service runtime component, see How Data Recovery Works. 9401 [Remote console only] Port used by the Veeam Backup & Replication console during Windows file-level recovery. I am not sure if that counts also when you deploy the components to the Hyper-V host. TCP Jul 18, 2024 · THAT BLOODY WINDOWS FIREWALL I TELL YOU. Once the service takes the next available port, it makes it the default port for all subsequent connections. General Security Jul 30, 2018 · Sometimes it is impossible to enable the necessary Firewall rules required by Veeam ONE using Windows Firewall UI. My configuration was looking like this: domain controller wi01: firewall currently switched off (I know it's bad) veeam-Server outbound traffic is allowed Nov 29, 2024 · Make sure to open port on the Veeam Backup for Microsoft 365 server. Jun 21, 2023 · # firewall-cmd --permanent --zone=veeamonly --add-port=6162/tcp --permanent Ok now we have made the zone but we have not activated it yet. Best regards Jean-Philippe Jul 19, 2016 · I am currently working on the firewall settings and yesterday I tried to create the rules I need for an active directory object restore. Linux server performing the role of a backup repository. 49152 to 65535 Nov 28, 2011 · If you have a stateful firewall (read: any firewall other than "dumb" network switch ACLs), these would not typically need to be opened explicitly - the firewall would automatically maintain a state table and dynamically open and close these return ports as needed. Backup server, guest interaction proxy (Enterprise and Enterprise Plus editions) TCP. 111. By default the Mount Server role is assigned to the repository, but this can be delegated out to any Windows based server at the remote site, which runs under the service ‘Veeam Mount Service’ The VBR Server communicates with the Mount Server over ports TCP 9401 and TCP 6170 by default Oct 13, 2015 · I'm trying to understand the behavior, because my expectation is that specifying the "veeam" zone in the files above it should limit where Veeam opens ports. Sep 6, 2022 · However, by default telnet client is not installed during Windows Server and the Veeam Backup Server often is our principal component our backup infrastructure. For example this command would set the proxy for all protocols to use proxy. Feb 29, 2012 · Veeam Community discussions and solutions for: Firewall ports and Endpoint Backup of Veeam Agent for Microsoft Windows Jan 10, 2025 · Default port used by the Veeam Guest Catalog service for catalog replication. Sep 19, 2013 · - I open (input) with NAT the same ports on the branch’s firewall. I think the reason for this is I have never been able to find documented firewall rules for deploying workstation Veeam agents, only for running them. Feb 26, 2025 · Ports used locally on the Veeam Agent computer for communication between Veeam Agent components and Veeam Agent for Microsoft Windows Service. Port used by the Veeam. Ubuntu repositories are almost entirely defined by FQDNs that do not have static addresses behind them. Target Linux machine with PostgreSQL. These rules allow communication between the components. Veeam Backup & Replication, however, cannot add firewall exclusions to hardware or third-party software firewalls. During setup, Veeam Backup & Replication automatically creates a firewall rule for the runtime process. Configure Data Retention; Security Guidelines. Can be customized during Veeam Backup & Replication installation. Those ports will only be associated with a VeeamAgent process when data is actively being transferred. This could be a security issue. Check Managed Server Configuration. Opening these ports allows the StoreOnce Catalyst traffic to pass to and from the StoreOnce Systems. Note: If you use default Microsoft Windows firewall settings, you do not need to configure dynamic RPC ports. If not, the firewall blocks the connection via the ports that Veeam uses for communication. This port is used by the Nov 20, 2014 · Here is another way of creating ports on Firewall, with the benefit that, the system will prompt you for all the options relating to inbound/outbound, protocol, allow/deny etc. Veeam B&R creates Windows firewall rules for it's components when they're installed - it would be very nice if Veeam for M365 would do the same! Aug 15, 2024 · Port. Ports - User Guide for VMware vSphere Aug 15, 2024 · Ports used to deploy the runtime coordination process on the target machine. 445. Dec 5, 2023 · These settings change which port the Veeam Transport Service binds to. By default, this port is 6180, but the service provider may customize this if customers have strict egress firewall rules. 9396. So when Veeam backs up or restores data, it communicates via various ports between its components, the backed-up servers and the storage systems. You can adjust the allowed port range for the dynamic TCP Ports. Install Veeam ONE Server; Step 3. It looks more like a VEEAM issue than a Windows 2012 R2 issue. Oct 23, 2024 · Ports used by the Veeam Backup & Replication console to communicate with the backup server. Dec 16, 2024 · Note: Microsoft Exchange (in particular, Client Access) expands standard Windows dynamic RPC port range to provide better scalability. If an environment was upgraded from a version of Veeam Backup & Replication before 10, all existing components that were managed before the upgrade will continue to use 2500-5000. msocsp. 0 port 10006 (10002 for older versions of VAL) should be sufficient to establish connection from agent to VBR. May 23, 2023 · The ports and Firewall Rules below must be configured at the Windows Server machine to allow the remote connection from Veeam ONE: Veeam B&R Veeam B&R Server machine; Veeam Backup Proxy machines; Veeam Backup Repository machines (Windows-based) Veeam Backup WAN Accelerator machines (Windows-based) + other Windows-based remote servers; VMware Jan 20, 2020 · Note: Replace <proxy> and <port> in quotes with the actual proxy server's hostname or IP and the port it uses. That is. TCP Port 443 needs to be opened from all Veeam Backup and VMware Backup Proxy servers as a Source with the vCenter internal IP as a target. To access the backup repository (Windows server) we need to open a lot of ports (RPC port range, etc. While the cloud gateway has to talk with the managing Veeam Backup & Replication server over TCP ports 6168 and 6160, it has to be reached only with the single TCP/UDP port used by the service over the internet. thanks, John Aug 15, 2024 · Ports used to deploy the runtime coordination process on the target machine. So i guess, what is the difference between this mode and managed mode? Sep 9, 2024 · I will start at the beginning. Apr 23, 2019 · Yes in this case it is Hyper-V, though I assume the ports would be the same regardless. Nov 21, 2017 · Note: The Veeam Service Provider Console software was previously known as Veeam Availability Console. But even if port forwarding is done, I would need to list target systems. Dec 20, 2015 · We are currently implementing new firewall rules and I'm seeing connections that I can not see in Veeam's used ports documentation. For example: random ESXi hosts to Veeam Windows proxy/mount servers ports 111 (NFS/portmapper). Which ports must be opened on the firewall to allow access from my Veeam Backup server/software to a NAS device on the DR site ? The Veeam backup will be configured to make the normal backups on a local available NAS and do a copy of it to the DR site for. TCP. Therefore, for the connection vCenter --> ESXi(s) port 443,902 (TCP) is required For clarification, here is the port list. dynamically. Veeam will create the firewall rules allowing you to re-enable the firewall after readding it back in. 9194. Ports used by the Veeam Guest Catalog service for replicating catalog data. Dec 28, 2018 · If StoreOnce Catalyst operations pass through a firewall, the network administrator must open (TCP) ports 9387 (Command protocol) and 9388 (Data protocol). Feb 19, 2025 · Each runtime component uses the next available port in the range, and only during application item restore. Here's the "veeam" zone without the IPs ( 6160/tcp 6162/tcp 2501/tcp 2504/tcp were added dynamically by the Veeam services ): Aug 22, 2014 · Review the firewalls present in the environment to ensure accommodations have been made for the ports used by Veeam Backup & Replication. Microsoft Active Directory machine. Port used to communicate with the May 28, 2022 · I configured a public IP through my firewall for the Veeam server but it's inside the firewall. The default range of transmission channel ports is available in the Used Ports section of the user guide. I had a funny feeling about the windows firewall, because it is common for many applications to be blocked due to the windows firewall, once I disabled/turned it off on a server/PC, magic happens. TCP Sep 4, 2024 · On backup infrastructure components, Veeam Backup & Replication automatically creates firewall rules for the required ports. 04 and I would like to know how do you configure firewall on this system to allow only required port please ? If my research are correct, I could see I need only 22 + 6160 + 6162 port open and Veeam open the others when neededI think I understand the commands are differents Hi folks. If the required ports are already allowed on VBR Windows firewall but the connection does not get through please keep working with support team. We want to backup to the B&R environment with VEB over the internet. As far as I know I have two options to fix this. I added the affected machine to a new Sophos Policy such that the Windows Firewall would be set to Allow All. The Dynamic RPC ports assigned to the temporary guest agents are the most common ports that cause this issue when Aug 14, 2012 · Veeam Community discussions and solutions for: Ports needed for NAS SMB Backup of File Shares and Object Storage Veeam Explorers can be installed on a machine hosting Veeam Backup for Microsoft 365 8 or the Veeam Backup for Microsoft 365 Console component. In addition to it, the Veeam Backup & Replication console uses this service port to connect to the backup server. Default range of ports used for managing data transfer during restore to the original (remote) machine or another Linux machine with Aug 13, 2019 · The new port range only applies to newly deployed components after Veeam Backup & Replication 10 is installed. After a Veeam upgrade from 12. Next step would be to configure backup job (which in you case can be managed by agent). Happy if you can provide some help. Port used by Veeam Agent for direct connection to the Veeam backup server using Jul 29, 2024 · - Veeam Cloud Connect, open TCP port 6180 - Veeam Agent, open TCP port 9393 - Veeam WAN Accelerator, open TCP port 2500-5000 (optional) Please note that these ports are required for Veeam to communicate with your Windows Server. Version 7 release notes do not instruct the end-user to manually adjust windows firewall rules 3. Sep 7, 2021 · Keep Windows Firewall On and add three new firewall rules. 2 all communication with the remote agent in question stopped. 6005 to 65535 Jan 25, 2024 · For every TCP connection that a backup job uses, one port from this range is assigned. google. New veeam user here, haven't spent any money yet but happy to shell out $100-300 for a lifetime license (if those exist) if veeam can do what I want in its paid versions. 34 using port 6183. Backup repository. Veeam then will setup the correct ports in the windows firewall for you. Veeam Update Notification Server (agents. Turning the firewall OFF allows the restore to proceed, but my preference is either: For the Veeam software to open the firewall ports it needs by itself, just like it says in the manual. 111:8080" netsh winhttp set proxy proxy-server="proxy. And, it looks like it shows up in VB&R. Notes. blob. We have already had a fight with the required firewall ports not being complete on the guide (you have to read a combinations of about 4 different port lists to cover everything). Ports used as a management channel from the Veeam Plug-in server to the Repository/Gateway server. Standard NFS ports. But after having a look at Microsofts list, I completely understand why you would not like to include this list in a statical user guide. We use AAIP for all Windows servers. Part 1: Change the Website Binding Port. 1 backup console new firewall port 9420 requirement - R&D Forums R&D Forums May 31, 2023 · Veeam ONE Server; Microsoft SQL Server; Veeam ONE UI; Walkthrough: Deploy and Configure Veeam ONE. May 17, 2017 · According to the support case notes, it turned out to be the open ports issue: Veeam B&R server was trying to communicate with the cluster on the dynamic port range and the firewall was dropping the connection. 34 Veeam agent then tries to connect 127. When we start a job session, for each task we start VeeamAgent process. Apr 10, 2015 · The most annoying circumstance is Veeam Backup & Replication server 9. 169. 10001. Regards. Veeam Agent for Windows can backup directly to Veeam Cloud Connect infrastructure via single port configured on Veeam Cloud Gateway. Directing only 49152/65535 didn't work. 135, 137 to 139, 445. I will turn Veeam VSS back on when we go to v5. The default settings of common NTP clients prevent attacks against an up-and-running Hardened Repository server. Default command port used for communication with Lenovo ThinkSystem DM/DG Series over HTTPS. Feb 19, 2024 · hi veeam communityI want to turn on the firewall of the backup server and configure the firewallI have veeam backup and enterprise manager on my serverThe servers that are backed up are mostly on hyper-v cluster. Jul 12, 2016 · In most cases for Veeam Backup & Replication, Veeam Agent for Microsoft Windows, and Veeam Agent for Linux, the relevant traffic will be between servers when data is transferred over the transport ports of 2500-3300 (TCP). Note that both ports are required. Currently it only has VMware and Hyper-V ports; however, that will be changing soon and will have: VMware; Hyper-V; AHV; Enterprise Jul 18, 2024 · Hyper V environment-Active Directory/Domain Veeam 12 is on VM1 on my domain pc Backup repository is a VM2 on a hyper v host1 We have a firewall doing what firewalls do etc VM1 successfully added **VM2(**veeam backup repository) The problem: Tried adding a windows server VM3 to VM1(located on hyper v host2) - I get the network path & credentials Dec 16, 2024 · Note: Microsoft Exchange (in particular, Client Access) expands standard Windows dynamic RPC port range to provide better scalability. It uses 10001/tcp to talk to the Veeam server and a port in the range 2500/tcp to 5000/tcp to transfer data to an Windows repository. 254 (metadata. It doesn’t provide mapping for specific hosts or any of the advanced feature that the Veeam Ports Tool provides. In addition, Microsoft Azure Plug-in for Veeam Backup & Replication also uses ports listed in the following table. The first VeeamAgent process will start with Port 2500, the second will use Port 2501, You signed in with another tab or window. You can simply create an ANY/ANY rule to allow all traffic, perform some tasks in VBR, then monitor what ports you see traffic flowing to/from and create rules based off of that. exe. 135, 137 to 139, 6160, 11731. com) TCP. #1 Global Leader in Data Resilience Dec 3, 2018 · So starting from a client with newly installed Windows Server 2019, with default Windows firewall configuration and a VEEAM server with Windows Server 2016 (veeam has installed the Guest Interaction Proxy on this server by default), I have to create a client rule for open traffic coming from the 2016 server on ports: 135, 137, 139, 445 (6190, 6290 are not necessary). Per the documentation you linked, (at the top) veeam should automatically add all required ports in windows firewall. Sep 21, 2023 · While port 445 is the port directly associated with the ADMIN$ share connectivity issue, other ports must be accessible to ensure the full functionality of Veeam Agent for Microsoft Windows. Veeam Backup Server. 443 6 days ago · Ports used by the Veeam Backup & Replication console to communicate with the backup server. After doing a little research, I stumbled across a post on the Veeam R&D forum. Feb 20, 2024 · And, when you install Veeam and its components (Proxies, Repos, etc), the installer already creates needed Windows f/w rules on the servers, as you can see from the Ports page in the Guide (see below): Veeam Ports. Veeam Agent Computer (Microsoft Windows) on EC2 Instance. Make sure to allow incoming and outgoing traffic on these ports in your Windows Firewall settings. net <-- The URL of your blob storage in Azure. Note: You must manually open this port range in Microsoft Windows Firewall. Note that both ports are required. Default range of ports used as data transmission channels. The challenge we're facing at the moment is we're unable to block this 9392 connection, creating a dedicated windows firewall rule to block 9392 appears to be ineffective. Also, the ports are used to deploy Veeam components. log and the syslogs and there are no entries there. Directing 1024/65535 worked, but this is a hell of a long range of ports. UDP. Default port used by Veeam Agent for Microsoft Windows operating in the managed mode for communication with the Veeam Backup server. Backup proxy. 1. Install Veeam ONE Web UI and Client; Step 4. It is a massive attack surface available :/ Jun 24, 2018 · Veeam Cloud Connect can do that with the hand of Veeam Cloud Gateway component. Nov 20, 2023 · Port. The problem is: I need to disable firewall in order to get a successful backup job. Port 443 must be open on the machine that runs the master management agent. The previous person in the job had allowed the firewall traffic through with no restrictions and this issue happened when I tightened up the firewall rules. In the case of this solution of changing the ports in Veeam, could you tell me exactly which ports and which registry keys need to be changed? Thanks in advance Oct 13, 2022 · hi there, the last couple weeks i face a weird issue which i will describe below. Configuring this registry value will cause all new Veeam Agent for Linux deployments for the specified Protection Group(s) (specified by ID#) to use the assigned port for the Veeam Transport Service. Pre-create Veeam ONE Database (Optional) Step 2. Oct 23, 2024 · Default port used to download Veeam Agent for Microsoft Windows setup file from the Veeam Installation Server. 6005 to 65535 Jan 24, 2012 · Hello Fabian, thanks a lot for your reply - straight to the point! That is exactly the answer I was looking for. Start the Veeam Agent for Microsoft Windows service after putting the registry value in place. Make sure to open this port on the Veeam Backup for Microsoft 365 server. The host discovery runs directly against the ESXi hosts, not via the VC. Aug 8, 2017 · For VAL 2. exe). Feb 16, 2010 · Yes, the correct credentials were supplied. Thanks Nov 19, 2024 · The Veeam VBR server not only needs to talk to the vCenter, it also needs to talk to the ESXi servers. Depending on the repository type, you should open the ports for communication with the source proxy and also those required for communication with Windows or Linux server, depending on the platform used. This one you can get from the Azure management portal. Protection Group-Specifc Custom Transport Service Port. Obviously if you also have a device between your windows servers such as a physical firewall you will need to also manually open those same ports through it. This KB describes the possible options of enabling the rules. UIService process for managing database connections. If port 6184 is already in use, Veeam Plug-in Service tries to use the next port number in the allocated range (6184 to 6194). What is the Ports List Finder? The tool brings together all the required ports from all the various Veeam Help Center pages into a single location. Use the sintax below: Test-NetConnection -ComputerName <IP> -Port <port> May 8, 2021 · 6 - Use Windows Firewall with only necessary ports. I'm reading some other stuff here but I don't really like the idea of such a long range of ports open. veeambp. In order to access the Veeam Ports finder tool please navigate to https://www. I figured out that often the firewall is the issue. 32-642. Jan 14, 2014 · Hi Mike, thanks for your fast reply. Sep 5, 2011 · Your Agents only require access to their primary backup repository. tld:8080" Feb 24, 2024 · I'm just starting to get involved with Veeam Backup & Replication and I'm facing a situation like the one described in this post, including the same third-party software (Qualys). Because vulnerability is surrounding, which ports from FW I need to open for Veeam's backups? Any solution is helpful. 111, 2049. Veeam regularly throws warnings and errors that Veeam can't connect to certain Windows VMs for guest processing and guest runtime injection over the network. Nov 30, 2023 · By default, port 9393 is used. 2. Configure Connection to SSRS Server; Step 5. Port 111 is used by the port mapper service. Can you ensue that no other application is using 6184? We would like to show you a description here but the site won’t allow us. Veeam Data Mover ports are Port 2500 to 3300. com and select ‘Ports List Finder’. Jul 26, 2018 · Noted, in order to use agent managed by backup server you should create protection group for the desired scope of machines and deploy agents via Veeam B&R server. That said, in case VM is not available on the network, FLR via VIX is performed, so in fact direct connection to it is not required. You can always just have a look at windows firewall to verify. Jul 28, 2022 · I can't deploy Veeam agents to our workstations remotely as the deployments are blocked by workstation Windows Firewall. 135, 445. Keep the firewall on for all domains (public, private and if applicable domain). Only the 111 is mentionned. The Windows firewall is not the strongest solution as a firewall, but's build-in, it's available, therefore use it as it should. Step 1. 6160. You can find the lists of the ports in the following sections of the Veeam Backup & Replication User Guide: Mar 23, 2015 · In the Veeam ports list the 1058 is only required from Backup server to Windows server using vpower services (that rule is ok for me) but can't find that from ESXi to Windows server using vpower services that the 1058 is required. You can find the lists of the ports in the following sections of the Veeam Backup & Replication User Guide: Oct 6, 2016 · When the Guest Interaction Proxy connects to a Windows 2012 R2 VM (client) to run VSS for application aware backups there is a file uploaded being renamed to C:\WINDOWS\VeeamVssSupport\VeeamGuestHelper. x86_64 May 11, 2021 · To do that, create firewall rules to connect to the address 169. tld (192. Feb 2, 2017 · I was wondering if anyone else has already run into this and created a solution - like a GPO that allows the veeam proxies access through the windows firewall. From a command prompt run the Nov 21, 2014 · I must do that also, but the main problem is, that our firewall software doesnt have an option to use workstations own ip address. This tries to open the Windows firewall for the application. You can also use a machine with Veeam Backup & Replication 12 or later that is deployed either along with any of these components, or as an independent solution. This port is used by the Nov 8, 2020 · Looks like i needed to open 10001 on the WIndows firewall on my server, I guess the Veeam B&R install did not open that one automatically. Default port used by Veeam Agent for Microsoft Windows operating in the standalone mode for communication with the Veeam Backup server. For more information, see this Microsoft article. Ensure all firewalls involved have been configured according to the Required Ports for Management of Veeam Agent for Microsoft Windows deployments. Sep 14, 2023 · I suspect the windows firewall is enabled and you’ll need to disable it 1st if you’ve not allowed the ports. This allowed Veeam to communicate and backup with the agent. Configure the DNS entry of the vCenter for local IP address usage. Jun 23, 2017 · We have some endpoints in our production environment that are located in separate LAN segments behind a firewall for security purpose. And yes, I agree that it might be useful to also cover this specific scenario in the documentation in order for Veeam administrators to be able to provide Network Teams/Security Teams the actual, narrowed-down, list of ports needed in such scenario. Dec 13, 2024 · Hello,I’m using Ubuntu 24. James Wilmoth (TitaniumCoder477) faced a similar problem and wrote a PowerShell script to recreate the required firewall rules alongside some Jan 16, 2015 · Prabhash, please review the full list of ports required for Veeam B&R components. So, if you want to test some communication port without install telnet client, you can use PowerShell for it. Backup. The way to activate it is by reloading the rules from disk Sep 7, 2017 · Key Location: HKLM\SOFTWARE\Veeam\Veeam Endpoint Backup\ Value Name: EndPoint_Rpc_Transport_Port Value Type: DWORD (32-bit) Value Value Data(Dec): <available_port>* *For the Value data, specify an available idle port. 1 backup console new firewall port 9420 requirement of Veeam Backup & Replication 12. Veeam Backup for Microsoft 365 server. I have the ports listed under "Windows Server Connections" open from the backup server to the guest interaction proxy. Keep Windows Firewall On and manual install the Veeam Installer Service (VeeamDeploySvc) Switch Windows Firewall Off and enable File and Printer Sharing during the first install; Option 1 – Keep the Windows Firewall On and add three new firewall rules. Dec 7, 2011 · Veeam Community discussions and solutions for: Problem with proxy remote install - firewall problem? of Veeam Backup & Replication Dec 21, 2010 · Veeam installation adds rules to windows firewall to allow incoming connections to proxy and agents. Secure connections port. Feb 26, 2025 · Default port used by Veeam Agent for Microsoft Windows operating in the managed mode for communication with the Veeam Backup server. Dec 4, 2024 · Dynamic RPC port range for Microsoft Windows 2008 and later. 49152 to 65535 (for Microsoft Windows Server 2008 or later) Dynamic RPC range used by the runtime coordination process that is deployed on the target machine. During setup, Veeam ONE automatically creates a firewall rule for the runtime process. So, now I can connect my agent to the server. 6170. Firewall in the network (if the traffic is crossing them). Dec 14, 2017 · NSX-t allows VMC customers to directly access the management network over the built-in firewall. that's the traffic I see on my firewall pass by. 6. 0 to 12. Target machine with Microsoft SQL Server, staging server Jun 15, 2024 · The help center article you have shared talks about "automatically opens ports used by the Veeam Data Mover". Feb 7, 2025 · As Microsoft Azure Plug-in for Veeam Backup & Replication is installed on the same machine where Veeam Backup & Replication runs, it uses the same ports as those described in the Veeam Backup & Replication User Guide, section Ports. 6160, 11731 Jun 24, 2019 · Good day Kindly assist me. 5. 1 -> 192. May 3, 2017 · I'm backing up windows VM's from a customers network that is hosted on our private cloud platform to our Veeam platform and have a locked down rule on our Veeam platform firewall that only allows 10001 and 2500-5000 through, this allows the Veeam agent to backup to our platform without any problems at all, the problem with the 2500-5000 range Mar 11, 2019 · You just have to open your firewall from your Veeam server to two hosts: 1. Sep 4, 2024 · On backup infrastructure components, Veeam Backup & Replication automatically creates firewall rules for the required ports. TCP: 9401 [Remote console only] Port used by the Veeam Backup & Replication console during Windows file-level recovery. On the server hosting the Web UI, open Internet Information Services (IIS) Manager (InetMgr. Feb 18, 2020 · Re: Veeam proxy firewall ports Post by foggy » Fri Oct 02, 2020 9:59 pm this post Hi Kevin, these ports should be open in both directions, and please also consider the requirements for backup proxy and backup repository ports. 2500 to 3300. Traffic that flows from the backup server to my isolated systems. 2500 to 2600. TCP, UDP. We would like to show you a description here but the site won’t allow us. Nov 22, 2018 · The problem I have now with the centralized approach is that there are multiple ports needed to stay in touch with my remote systems. xxx. Nov 7, 2012 · If I understand you right, it will be a repository server rather than a proxy server. Jan 11, 2019 · Please advise how to configure the Windows Firewall to permit SQL database restores to a SQL server. If that's the backup server, then you have to open this ports. make sure you see the column name Enabled showing the entry as True to ensure the firewall rule is enabled. 49152 to 65535 (for Microsoft Windows Server 2012 and later) Dynamic RPC port range. It’s easy to prevent network time attacks against Veeam Hardened Repository. veeam. Port used for connections to the mount service. Backup server, Veeam Backup & Replication console. Open May 20, 2016 · Remote Office – with V9 Veeam Mount Server . the actual veeamagent. Firewall on the Veeam Backup Server; Firewall on the Windows machine itself. tcp/139,l tcp/445, dynamic ports in the 50k range, ports in the 60k range, etc. Nov 25, 2019 · I manage a number of Windows VMs and Veeam. Jan 7, 2025 · Port used as a control channel from the Veeam Plug-in server to the target Linux host. I'm not sure, if we ever have tested it with a smaller RPC Port range. Jul 26, 2018 · Windows agent has a port failover logic, so if during Veeam Agent Service start the needed port is occupied by any other process, agent service will start to use next port it the list. core. 0. Apr 7, 2013 · So we're trying to restrict Veeam Console access by blocking port 9392 (Veeam Console port) to the VBR server from all sources except for the management server IP address. Jun 6, 2024 · I running Veeam for backup some remote equipment's files, but the Veeam server has installed ESET endpoint. So theoretically, you shouldn’t need to manipulate your Windows f/w. Firewall Rules Backup server is a Windows 7 machine, destination proxy another Windows 7 machine. TCP/UDP-Port 135: Wird für die RPC-Kommunikation benötigt. These ports show up in our firewall log. Default ports Jul 6, 2023 · What are the ports and the protocol used by the Veeam backup server v12? I wanted to turn on my firewall, but don't want to cause the backup, replication or restore process to fail. 443. Setup: Linux Agent: Centos 6 2. ocsp. May 19, 2022 · Veeam Backup Server. Lenovo ThinkSystem DM/DG Series storage system. Sep 9, 2024 · There's a couple of new ports on the main App server that the Proxy needs to be able to connect to: NATS on port 4222 and PostgreSQL on port 5432. May 11, 2017 · The VAW documentation describes the TCP/IP ports used by VAW when sending the backup to a Veeam repository. Reload to refresh your session. el6. TCP: 9396: Port used by the Veeam. exe that is executing is not one of the ones that had been added to the firewall rules during the installation/upgrade process Mar 1, 2023 · If the firewall is enabled on the NTS server, then incoming ports UDP 123 (NTP) and TCP 4460 (NTS-KE) need to be opened. May 5, 2023 · Veeam ONE Ports; Veeam Agent for Microsoft Windows Ports; Veeam Agent for Linux Ports; Ports 2500-3300 are dedicated to data transport. Workers. All ports are redirected to SRV-BRANCH-VEEAM except 443 and 902 to SRV-BRANCH-HOST - Add SRV-BRANCH-VEEAM into “Backup Infrastructure => Wan accelerator” : success - The opposite : still failing Well, my questions : Oct 3, 2024 · Veeam Backup for Proxmox VE automatically creates firewall rules for the ports required to allow communication between the Proxmox VE server, workers and the backup server. Required to manage inbound/outbound traffic when interacting with Veeam Explorer for Microsoft Exchange. internal) through the ports TCP 80 and UDP 53, 123; Allow access to Ubuntu repositories that provide updates for the backup appliance. Each runtime component uses the next available port in the range, and only during application item restore. 254. Jul 14, 2014 · I have a Windows Server 2012R2/vSphere environment and configure Windows Firewall via group policy to secure our internal network. Microsoft Windows server used as a backup repository or gateway server. For such setup you would need to keep port 10005 opened as was mentioned in Agent Management guide. com <-- This one is needed for checking the SSL certificate of the Azure site. . 1536 does not recognize PasswordAuthentification on the target system is not allowed but prints out a very confusing message instead: "Host rescan is required" when waiting for rescan job and unable to process the backup. After adding the port range to the ACLs, the cluster was successfully added. Mar 13, 2024 · A firewall in the environment is blocking traffic between the machine where Veeam Agent for Microsoft Windows is installed and the Veeam Backup Server. By default, port 9392 is used. If the default port number is already in use, Veeam Agent for Microsoft Windows Service will try to use the next port number. Source Windows machine with Microsoft Exchange. The old name is still used in some locations for backward compatibility, in particular, the IIS Manager. This port is used by Veeam Backup Enterprise Manager to collect data from backup servers. Initially I copied the automatically generated Veeam firewall rules on Proxys/Repo/Mount/B+R etc into group policies and this worked fine. Hier beispielhaft einige der wichtigsten Ports: Veeam Backup & Replication: TCP-Port 10001 bis 10300: Diese Ports werden für die Kommunikation zwischen dem Veeam-Backup-Server und den Proxy-Servern sowie den Repositories verwendet. Dec 28, 2014 · great integration with Veeam B&R now, regarding VEB repositories. 10005. Nov 7, 2016 · I know the agent handles the Windows firewall rules, but I have to talk to people in three different departments to get firewall rules and ACLs adjusted on all the equipment between the Veeam server and the Windows client, and can't do that when the rules aren't listed. windows. 168. My que Oct 31, 2022 · The command will show you the result of all Windows Firewall rule that contains *Veeam* in the display name. Summary. Cheers!. You switched accounts on another tab or window. Data between the Veeam Agent computer and backup repositories is transferred directly, bypassing Veeam backup servers. I realize I'm being lazy here, just wondering if someone has already done the work of figuring out the ports etc. Aug 16, 2024 · Default command port used for communication with Lenovo ThinkSystem DM/DG Series over HTTP. The 6184 port in the question is used locally for Veeam agent components communication. Within the Veeam console, click Backup Infrastructure Aug 23, 2011 · When Veeam Backup & Replication connects to a VM, it creates firewall exclusions for the ports and processes it uses. The following table describes network ports that must be open to ensure proper communication of workers with other backup infrastructure components. I have turned on VMWare Tools Quiescence and turned off Veeam VSS and it works fine. We are getting our IP addresses from the dhcp server, let's say that we got an IP 192. In this section, you can also find diagrams illustrating the interaction between Veeam Cloud Connect components and used ports in following scenarios: Jan 25, 2011 · Veeam Community discussions and solutions for: 12. Jul 24, 2023 · バックアップインフラストラクチャのコンポーネントでは、Veeam Backup & Replicationによって、必要なポートについてファイアウォールのルールが自動的に作成されます。これらのルールにより、コンポーネント間の通信が可能になります。 ポートのリストは、Veeam Backup & Replicationユーザーガイド の Dec 30, 2011 · Even with or without Windows 2012 R2 firewall turned or off, the VEEAM server fails to add the hyperV in another IP block. Veeam Agent computer. (for Microsoft Windows Server 2008 or later) These connections are coming from Veeam rather than some kind of port scan or something - The connections are coming from the Veeam server (as evidenced by firewall logs showing me the source IP) and further proven by the fact that if I manually initiate a backup, these random ports are hit during the backup process (before any data is Sep 23, 2022 · Veeam Community discussions and solutions for: Particular Firewall rules needed for Restore Portal of Veeam Backup for Microsoft 365 Nov 23, 2021 · Disabling the windows firewall for a short moment will make sure, that veeam can be installed. 2. Just open the necessary ports needed for Veeam to communicate with the necessary Mar 17, 2025 · Dynamic RPC port range for Microsoft Windows 2008 and later. TCP UDP. Microsoft Windows server performing the role of a backup repository. For this communication to function smoothly, certain ports must be enabled in the firewall. 111) port 8080: netsh winhttp set proxy proxy-server="192. i have Veeam B&R installed on a physical domain joined server 2012 r2. After the installation, windows firewall will be activated again by the administrator. I know that mount server provides powerNFS for instant restore etc. UDP and TCP port 135, 137, 138, 139 and 445 ? Feb 26, 2025 · Port. Veeam Explorer for Microsoft Exchange. I had to turn it off, had no time deciding which port to enable lol, too busy. Aug 16, 2024 · Default range of ports for the runtime component installed on the target or staging Oracle server to support restore operations. Not even a "DROP" or "ACCEPT" message from the said IP address of the VEEAM. There are several physical servers, including SQL Server, which is also a cluster. Port required for remote network discovery of computers in the client infrastructure. TCP Ports 2500-5000 have an IPTABLES rule to allow forward traffic between devices, as well as a rule for 10002 for the backup agent. My dad and I both have Windows-based plex servers, and we want to back up our servers, onto each others' servers onto spare hard drives we have. TCP-Port 443: Für die sichere Kommunikation über Jun 9, 2021 · The idea behind the tool was to make it easier to find all the ports you need for a Veeam solution. I looked at the pfirewall. ljwnd emxasr gowk ryagx okmx tvlde gxeih hxzyka gisd hddraz aumbep wnzim fpf vevnlvf vdfo