- Veeam firewall ports windows Can you ensue that no other application is using 6184? We would like to show you a description here but the site won’t allow us. Port required for remote network discovery of computers in the client infrastructure. You signed out in another tab or window. Once the service takes the next available port, it makes it the default port for all subsequent connections. com and select ‘Ports List Finder’. 111) port 8080: netsh winhttp set proxy proxy-server="192. Microsoft Windows server used as a backup repository or gateway server. Veeam Backup & Replication, however, cannot add firewall exclusions to hardware or third-party software firewalls. Default ports Jul 6, 2023 · What are the ports and the protocol used by the Veeam backup server v12? I wanted to turn on my firewall, but don't want to cause the backup, replication or restore process to fail. After adding the port range to the ACLs, the cluster was successfully added. ocsp. My que Oct 31, 2022 · The command will show you the result of all Windows Firewall rule that contains *Veeam* in the display name. Mount server. Port used to communicate with the Apr 21, 2015 · I have read several guides and we are still struggling to get this set up. The default settings of common NTP clients prevent attacks against an up-and-running Hardened Repository server. make sure you see the column name Enabled showing the entry as True to ensure the firewall rule is enabled. 443 6 days ago · Ports used by the Veeam Backup & Replication console to communicate with the backup server. TCP Sep 4, 2024 · On backup infrastructure components, Veeam Backup & Replication automatically creates firewall rules for the required ports. We are getting our IP addresses from the dhcp server, let's say that we got an IP 192. Pre-create Veeam ONE Database (Optional) Step 2. tcp/139,l tcp/445, dynamic ports in the 50k range, ports in the 60k range, etc. 6170. Standard NFS ports. Install Veeam ONE Web UI and Client; Step 4. Dec 19, 2024 · Default port used for communication with Veeam Plug-in. Linux server performing the role of a backup repository. These rules allow communication between the components. 1 backup console new firewall port 9420 requirement of Veeam Backup & Replication 12. 1536 does not recognize PasswordAuthentification on the target system is not allowed but prints out a very confusing message instead: "Host rescan is required" when waiting for rescan job and unable to process the backup. It looks more like a VEEAM issue than a Windows 2012 R2 issue. Note: If you use default Microsoft Windows firewall settings, you do not need to configure dynamic RPC ports. May 17, 2017 · According to the support case notes, it turned out to be the open ports issue: Veeam B&R server was trying to communicate with the cluster on the dynamic port range and the firewall was dropping the connection. ). thanks, John Aug 15, 2024 · Ports used to deploy the runtime coordination process on the target machine. Lenovo ThinkSystem DM/DG Series storage system. After doing a little research, I stumbled across a post on the Veeam R&D forum. But that's a configuration in the windows OS itself. Thanks Nov 19, 2024 · The Veeam VBR server not only needs to talk to the vCenter, it also needs to talk to the ESXi servers. Sep 4, 2024 · On backup infrastructure components, Veeam Backup & Replication automatically creates firewall rules for the required ports. TCP: 9396: Port used by the Veeam. 1. Feb 18, 2020 · Re: Veeam proxy firewall ports Post by foggy » Fri Oct 02, 2020 9:59 pm this post Hi Kevin, these ports should be open in both directions, and please also consider the requirements for backup proxy and backup repository ports. Veeam Backup Server. windows. veeam. 2. Source Windows machine with Microsoft Exchange. Apr 23, 2019 · Yes in this case it is Hyper-V, though I assume the ports would be the same regardless. For more information, see this Microsoft KB article. My configuration was looking like this: domain controller wi01: firewall currently switched off (I know it's bad) veeam-Server outbound traffic is allowed Nov 29, 2024 · Make sure to open port on the Veeam Backup for Microsoft 365 server. TCP UDP. core. Sep 5, 2011 · Your Agents only require access to their primary backup repository. Port used to communicate with the May 28, 2022 · I configured a public IP through my firewall for the Veeam server but it's inside the firewall. Just open the necessary ports needed for Veeam to communicate with the necessary Mar 17, 2025 · Dynamic RPC port range for Microsoft Windows 2008 and later. Dec 28, 2014 · great integration with Veeam B&R now, regarding VEB repositories. 32-642. Backup server, Veeam Backup & Replication console. I am not sure if that counts also when you deploy the components to the Hyper-V host. Adding server public IP and hostname to Windows host file. 34 using port 6183. Which ports must be opened on the firewall to allow access from my Veeam Backup server/software to a NAS device on the DR site ? The Veeam backup will be configured to make the normal backups on a local available NAS and do a copy of it to the DR site for. New veeam user here, haven't spent any money yet but happy to shell out $100-300 for a lifetime license (if those exist) if veeam can do what I want in its paid versions. 1 backup console new firewall port 9420 requirement - R&D Forums R&D Forums May 31, 2023 · Veeam ONE Server; Microsoft SQL Server; Veeam ONE UI; Walkthrough: Deploy and Configure Veeam ONE. I had to turn it off, had no time deciding which port to enable lol, too busy. Jan 7, 2025 · Port used as a control channel from the Veeam Plug-in server to the target Linux host. We use Veeam Agent for Windows to backup those clients. Within the Veeam console, click Backup Infrastructure Aug 23, 2011 · When Veeam Backup & Replication connects to a VM, it creates firewall exclusions for the ports and processes it uses. This port is used by the Nov 8, 2020 · Looks like i needed to open 10001 on the WIndows firewall on my server, I guess the Veeam B&R install did not open that one automatically. This port is used by the Nov 20, 2014 · Here is another way of creating ports on Firewall, with the benefit that, the system will prompt you for all the options relating to inbound/outbound, protocol, allow/deny etc. Nov 7, 2012 · If I understand you right, it will be a repository server rather than a proxy server. 0 port 10006 (10002 for older versions of VAL) should be sufficient to establish connection from agent to VBR. TCP/UDP-Port 135: Wird für die RPC-Kommunikation benötigt. Firewall on the Veeam Backup Server; Firewall on the Windows machine itself. 6 days ago · Ports used by the Veeam Backup & Replication console to communicate with the backup server. Feb 26, 2025 · Default port used by Veeam Agent for Microsoft Windows operating in the managed mode for communication with the Veeam Backup server. the actual veeamagent. Happy if you can provide some help. Best regards Jean-Philippe Jul 19, 2016 · I am currently working on the firewall settings and yesterday I tried to create the rules I need for an active directory object restore. TCP Ports 2500-5000 have an IPTABLES rule to allow forward traffic between devices, as well as a rule for 10002 for the backup agent. 135, 445. Keep the firewall on for all domains (public, private and if applicable domain). If the required ports are already allowed on VBR Windows firewall but the connection does not get through please keep working with support team. Jul 26, 2018 · Windows agent has a port failover logic, so if during Veeam Agent Service start the needed port is occupied by any other process, agent service will start to use next port it the list. 9194. Port used by Veeam Agent for direct connection to the Veeam backup server using Jul 29, 2024 · - Veeam Cloud Connect, open TCP port 6180 - Veeam Agent, open TCP port 9393 - Veeam WAN Accelerator, open TCP port 2500-5000 (optional) Please note that these ports are required for Veeam to communicate with your Windows Server. I added the affected machine to a new Sophos Policy such that the Windows Firewall would be set to Allow All. Make sure to allow incoming and outgoing traffic on these ports in your Windows Firewall settings. #1 Global Leader in Data Resilience Dec 3, 2018 · So starting from a client with newly installed Windows Server 2019, with default Windows firewall configuration and a VEEAM server with Windows Server 2016 (veeam has installed the Guest Interaction Proxy on this server by default), I have to create a client rule for open traffic coming from the 2016 server on ports: 135, 137, 139, 445 (6190, 6290 are not necessary). xxx. Veeam Backup for Microsoft 365 server. 445. Not sure what firewall you have, but nearly every NGFW will allow you to view traffic analysis from point to point. Port 443 must be open on the machine that runs the master management agent. Nov 25, 2019 · I manage a number of Windows VMs and Veeam. Can be customized during Veeam Backup & Replication installation. It doesn’t provide mapping for specific hosts or any of the advanced feature that the Veeam Ports Tool provides. Open May 20, 2016 · Remote Office – with V9 Veeam Mount Server . Sep 21, 2023 · While port 445 is the port directly associated with the ADMIN$ share connectivity issue, other ports must be accessible to ensure the full functionality of Veeam Agent for Microsoft Windows. Microsoft Windows server performing the role of a backup repository. For this communication to function smoothly, certain ports must be enabled in the firewall. 254 (metadata. Opening these ports allows the StoreOnce Catalyst traffic to pass to and from the StoreOnce Systems. Make sure to open this port on the Veeam Backup for Microsoft 365 server. Check Managed Server Configuration. Nov 20, 2023 · Port. Per the documentation you linked, (at the top) veeam should automatically add all required ports in windows firewall. 34 Veeam agent then tries to connect 127. During setup, Veeam Backup & Replication automatically creates a firewall rule for the runtime process. that's the traffic I see on my firewall pass by. This allowed Veeam to communicate and backup with the agent. You can find the lists of the ports in the following sections of the Veeam Backup & Replication User Guide: Mar 23, 2015 · In the Veeam ports list the 1058 is only required from Backup server to Windows server using vpower services (that rule is ok for me) but can't find that from ESXi to Windows server using vpower services that the 1058 is required. Dec 13, 2024 · Hello,I’m using Ubuntu 24. tld (192. Note: You must manually open this port range in Microsoft Windows Firewall. com) TCP. We would like to show you a description here but the site won’t allow us. Secure connections port. 10005. Target machine with Microsoft SQL Server, staging server Jun 15, 2024 · The help center article you have shared talks about "automatically opens ports used by the Veeam Data Mover". Oct 23, 2024 · Ports used by the Veeam Backup & Replication console to communicate with the backup server. To access the backup repository (Windows server) we need to open a lot of ports (RPC port range, etc. Workers. That is. veeambp. Dec 7, 2011 · Veeam Community discussions and solutions for: Problem with proxy remote install - firewall problem? of Veeam Backup & Replication Dec 21, 2010 · Veeam installation adds rules to windows firewall to allow incoming connections to proxy and agents. 9401 [Remote console only] Port used by the Veeam Backup & Replication console during Windows file-level recovery. Part 1: Change the Website Binding Port. 6160, 11731 Jun 24, 2019 · Good day Kindly assist me. After a Veeam upgrade from 12. 169. The challenge we're facing at the moment is we're unable to block this 9392 connection, creating a dedicated windows firewall rule to block 9392 appears to be ineffective. This tries to open the Windows firewall for the application. Feb 20, 2024 · And, when you install Veeam and its components (Proxies, Repos, etc), the installer already creates needed Windows f/w rules on the servers, as you can see from the Ports page in the Guide (see below): Veeam Ports. UDP. 2500 to 3300. Use the sintax below: Test-NetConnection -ComputerName <IP> -Port <port> May 8, 2021 · 6 - Use Windows Firewall with only necessary ports. May 23, 2023 · The ports and Firewall Rules below must be configured at the Windows Server machine to allow the remote connection from Veeam ONE: Veeam B&R Veeam B&R Server machine; Veeam Backup Proxy machines; Veeam Backup Repository machines (Windows-based) Veeam Backup WAN Accelerator machines (Windows-based) + other Windows-based remote servers; VMware Jan 20, 2020 · Note: Replace <proxy> and <port> in quotes with the actual proxy server's hostname or IP and the port it uses. If the default port number is already in use, Veeam Agent for Microsoft Windows Service will try to use the next port number. And, it looks like it shows up in VB&R. I find it an acceptable workaround to have a fast solution. The host discovery runs directly against the ESXi hosts, not via the VC. Jan 11, 2019 · Please advise how to configure the Windows Firewall to permit SQL database restores to a SQL server. Jun 21, 2023 · # firewall-cmd --permanent --zone=veeamonly --add-port=6162/tcp --permanent Ok now we have made the zone but we have not activated it yet. Jan 14, 2014 · Hi Mike, thanks for your fast reply. This could be a security issue. Default range of ports used as data transmission channels. 6160. So, if you want to test some communication port without install telnet client, you can use PowerShell for it. In the case of this solution of changing the ports in Veeam, could you tell me exactly which ports and which registry keys need to be changed? Thanks in advance Oct 13, 2022 · hi there, the last couple weeks i face a weird issue which i will describe below. For every TCP connection that a backup job uses, one port from this range is assigned. up to now i was able to add all other servers in the infrastructure (one more physical server 2012 r2, some VM servers 2012 r2 and a Azure file server 2019) without any issue. 111, 2049. May 3, 2017 · I'm backing up windows VM's from a customers network that is hosted on our private cloud platform to our Veeam platform and have a locked down rule on our Veeam platform firewall that only allows 10001 and 2500-5000 through, this allows the Veeam agent to backup to our platform without any problems at all, the problem with the 2500-5000 range Mar 11, 2019 · You just have to open your firewall from your Veeam server to two hosts: 1. You can find the lists of the ports in the following sections of the Veeam Backup & Replication User Guide: Oct 6, 2016 · When the Guest Interaction Proxy connects to a Windows 2012 R2 VM (client) to run VSS for application aware backups there is a file uploaded being renamed to C:\WINDOWS\VeeamVssSupport\VeeamGuestHelper. During setup, Veeam ONE automatically creates a firewall rule for the runtime process. Jul 12, 2016 · In most cases for Veeam Backup & Replication, Veeam Agent for Microsoft Windows, and Veeam Agent for Linux, the relevant traffic will be between servers when data is transferred over the transport ports of 2500-3300 (TCP). Firewall in the network (if the traffic is crossing them). Default port used by Veeam Agent for Microsoft Windows operating in the standalone mode for communication with the Veeam Backup server. Aug 8, 2017 · For VAL 2. Apr 7, 2013 · So we're trying to restrict Veeam Console access by blocking port 9392 (Veeam Console port) to the VBR server from all sources except for the management server IP address. We use AAIP for all Windows servers. 2. I have the ports listed under "Windows Server Connections" open from the backup server to the guest interaction proxy. In this section, you can also find diagrams illustrating the interaction between Veeam Cloud Connect components and used ports in following scenarios: Jan 25, 2011 · Veeam Community discussions and solutions for: 12. Jul 28, 2022 · I can't deploy Veeam agents to our workstations remotely as the deployments are blocked by workstation Windows Firewall. I have turned on VMWare Tools Quiescence and turned off Veeam VSS and it works fine. Step 1. Jul 24, 2023 · バックアップインフラストラクチャのコンポーネントでは、Veeam Backup & Replicationによって、必要なポートについてファイアウォールのルールが自動的に作成されます。これらのルールにより、コンポーネント間の通信が可能になります。 ポートのリストは、Veeam Backup & Replicationユーザーガイド の Dec 30, 2011 · Even with or without Windows 2012 R2 firewall turned or off, the VEEAM server fails to add the hyperV in another IP block. Sep 6, 2022 · However, by default telnet client is not installed during Windows Server and the Veeam Backup Server often is our principal component our backup infrastructure. My dad and I both have Windows-based plex servers, and we want to back up our servers, onto each others' servers onto spare hard drives we have. Veeam Update Notification Server (agents. For example: random ESXi hosts to Veeam Windows proxy/mount servers ports 111 (NFS/portmapper). Default port used by Veeam Agent for Microsoft Windows operating in the managed mode for communication with the Veeam Backup server. In order to access the Veeam Ports finder tool please navigate to https://www. 111. These ports show up in our firewall log. Nov 7, 2016 · I know the agent handles the Windows firewall rules, but I have to talk to people in three different departments to get firewall rules and ACLs adjusted on all the equipment between the Veeam server and the Windows client, and can't do that when the rules aren't listed. You can also use a machine with Veeam Backup & Replication 12 or later that is deployed either along with any of these components, or as an independent solution. But after having a look at Microsofts list, I completely understand why you would not like to include this list in a statical user guide. The way to activate it is by reloading the rules from disk Sep 7, 2017 · Key Location: HKLM\SOFTWARE\Veeam\Veeam Endpoint Backup\ Value Name: EndPoint_Rpc_Transport_Port Value Type: DWORD (32-bit) Value Value Data(Dec): <available_port>* *For the Value data, specify an available idle port. Configure Data Retention; Security Guidelines. Reload to refresh your session. 0. Is this technically possible and supported with VEB ? Big question, what ports should be forwarded / opened between laptop <> Internet <> B&R server (suppose all Veeam components are installed on the B&R server) ? Apr 7, 2015 · A few times now, I have run into a situation where I want to reset the Windows firewall to default to try and eliminate a symptom, but I am loath to do that because I would have to recreate all the Veeam firewall rules. Feb 19, 2025 · Each runtime component uses the next available port in the range, and only during application item restore. Nov 30, 2023 · By default, port 9393 is used. In addition to it, the Veeam Backup & Replication console uses this service port to connect to the backup server. Dec 28, 2018 · If StoreOnce Catalyst operations pass through a firewall, the network administrator must open (TCP) ports 9387 (Command protocol) and 9388 (Data protocol). Jun 23, 2017 · We have some endpoints in our production environment that are located in separate LAN segments behind a firewall for security purpose. Oct 23, 2024 · Default port used to download Veeam Agent for Microsoft Windows setup file from the Veeam Installation Server. Only the 111 is mentionned. Dec 5, 2023 · These settings change which port the Veeam Transport Service binds to. Mar 20, 2025 · To learn what ports are required for other Veeam Backup & Replication components in the Veeam Cloud Connect infrastructure, see the Ports section in the Veeam Backup & Replication User Guide. Veeam Explorer for Microsoft Exchange. Directing only 49152/65535 didn't work. Each runtime component uses the next available port in the range, and only during application item restore. May 5, 2023 · Veeam ONE Ports; Veeam Agent for Microsoft Windows Ports; Veeam Agent for Linux Ports; Ports 2500-3300 are dedicated to data transport. Because vulnerability is surrounding, which ports from FW I need to open for Veeam's backups? Any solution is helpful. May 19, 2022 · Veeam Backup Server. This port is used by Veeam Backup Enterprise Manager to collect data from backup servers. Dec 20, 2015 · We are currently implementing new firewall rules and I'm seeing connections that I can not see in Veeam's used ports documentation. We want to backup to the B&R environment with VEB over the internet. Obviously if you also have a device between your windows servers such as a physical firewall you will need to also manually open those same ports through it. I know that mount server provides powerNFS for instant restore etc. 10001. Feb 16, 2010 · Yes, the correct credentials were supplied. Backup server, guest interaction proxy (Enterprise and Enterprise Plus editions) TCP. 135, 137 to 139, 445. 49152 to 65535 Nov 28, 2011 · If you have a stateful firewall (read: any firewall other than "dumb" network switch ACLs), these would not typically need to be opened explicitly - the firewall would automatically maintain a state table and dynamically open and close these return ports as needed. TCP-Port 443: Für die sichere Kommunikation über Jun 9, 2021 · The idea behind the tool was to make it easier to find all the ports you need for a Veeam solution. It is a massive attack surface available :/ Jun 24, 2018 · Veeam Cloud Connect can do that with the hand of Veeam Cloud Gateway component. Traffic that flows from the backup server to my isolated systems. May 11, 2017 · The VAW documentation describes the TCP/IP ports used by VAW when sending the backup to a Veeam repository. 1 -> 192. The Windows firewall is not the strongest solution as a firewall, but's build-in, it's available, therefore use it as it should. UIService process for managing database connections. log and the syslogs and there are no entries there. Ubuntu repositories are almost entirely defined by FQDNs that do not have static addresses behind them. It’s easy to prevent network time attacks against Veeam Hardened Repository. domain. You can always just have a look at windows firewall to verify. 04 and I would like to know how do you configure firewall on this system to allow only required port please ? If my research are correct, I could see I need only 22 + 6160 + 6162 port open and Veeam open the others when neededI think I understand the commands are differents Hi folks. We have already had a fight with the required firewall ports not being complete on the guide (you have to read a combinations of about 4 different port lists to cover everything). 0 to 12. Default command port used for communication with Lenovo ThinkSystem DM/DG Series over HTTPS. Nov 21, 2017 · Note: The Veeam Service Provider Console software was previously known as Veeam Availability Console. 443. For such setup you would need to keep port 10005 opened as was mentioned in Agent Management guide. Dec 4, 2024 · Dynamic RPC port range for Microsoft Windows 2008 and later. Microsoft Active Directory machine. . Mar 13, 2024 · A firewall in the environment is blocking traffic between the machine where Veeam Agent for Microsoft Windows is installed and the Veeam Backup Server. 5. Version 7 release notes do not instruct the end-user to manually adjust windows firewall rules 3. Feb 26, 2025 · Ports used locally on the Veeam Agent computer for communication between Veeam Agent components and Veeam Agent for Microsoft Windows Service. 49152 to 65535 (for Microsoft Windows Server 2008 or later) Dynamic RPC range used by the runtime coordination process that is deployed on the target machine. Port used for connections to the mount service. Sep 9, 2024 · There's a couple of new ports on the main App server that the Proxy needs to be able to connect to: NATS on port 4222 and PostgreSQL on port 5432. 2500 to 2600. That said, in case VM is not available on the network, FLR via VIX is performed, so in fact direct connection to it is not required. (for Microsoft Windows Server 2008 or later) These connections are coming from Veeam rather than some kind of port scan or something - The connections are coming from the Veeam server (as evidenced by firewall logs showing me the source IP) and further proven by the fact that if I manually initiate a backup, these random ports are hit during the backup process (before any data is Sep 23, 2022 · Veeam Community discussions and solutions for: Particular Firewall rules needed for Restore Portal of Veeam Backup for Microsoft 365 Nov 23, 2021 · Disabling the windows firewall for a short moment will make sure, that veeam can be installed. The 6184 port in the question is used locally for Veeam agent components communication. Required to manage inbound/outbound traffic when interacting with Veeam Explorer for Microsoft Exchange. Veeam will create the firewall rules allowing you to re-enable the firewall after readding it back in. Hier beispielhaft einige der wichtigsten Ports: Veeam Backup & Replication: TCP-Port 10001 bis 10300: Diese Ports werden für die Kommunikation zwischen dem Veeam-Backup-Server und den Proxy-Servern sowie den Repositories verwendet. Default range of ports used for managing data transfer during restore to the original (remote) machine or another Linux machine with Aug 13, 2019 · The new port range only applies to newly deployed components after Veeam Backup & Replication 10 is installed. TCP Jul 18, 2024 · THAT BLOODY WINDOWS FIREWALL I TELL YOU. Protection Group-Specifc Custom Transport Service Port. Turning the firewall OFF allows the restore to proceed, but my preference is either: For the Veeam software to open the firewall ports it needs by itself, just like it says in the manual. Notes. Install Veeam ONE Server; Step 3. Jul 14, 2014 · I have a Windows Server 2012R2/vSphere environment and configure Windows Firewall via group policy to secure our internal network. So theoretically, you shouldn’t need to manipulate your Windows f/w. x86_64 May 11, 2021 · To do that, create firewall rules to connect to the address 169. 9396. Next step would be to configure backup job (which in you case can be managed by agent). This KB describes the possible options of enabling the rules. Ensure all firewalls involved have been configured according to the Required Ports for Management of Veeam Agent for Microsoft Windows deployments. Veeam then will setup the correct ports in the windows firewall for you. Sep 19, 2013 · - I open (input) with NAT the same ports on the branch’s firewall. The first VeeamAgent process will start with Port 2500, the second will use Port 2501, You signed in with another tab or window. Veeam Data Mover ports are Port 2500 to 3300. And yes, I agree that it might be useful to also cover this specific scenario in the documentation in order for Veeam administrators to be able to provide Network Teams/Security Teams the actual, narrowed-down, list of ports needed in such scenario. Here's the "veeam" zone without the IPs ( 6160/tcp 6162/tcp 2501/tcp 2504/tcp were added dynamically by the Veeam services ): Aug 22, 2014 · Review the firewalls present in the environment to ensure accommodations have been made for the ports used by Veeam Backup & Replication. Also, the ports are used to deploy Veeam components. Target Linux machine with PostgreSQL. I'm not sure, if we ever have tested it with a smaller RPC Port range. exe that is executing is not one of the ones that had been added to the firewall rules during the installation/upgrade process Mar 1, 2023 · If the firewall is enabled on the NTS server, then incoming ports UDP 123 (NTP) and TCP 4460 (NTS-KE) need to be opened. google. Note that both ports are required. You switched accounts on another tab or window. Veeam regularly throws warnings and errors that Veeam can't connect to certain Windows VMs for guest processing and guest runtime injection over the network. Backup repository. James Wilmoth (TitaniumCoder477) faced a similar problem and wrote a PowerShell script to recreate the required firewall rules alongside some Jan 16, 2015 · Prabhash, please review the full list of ports required for Veeam B&R components. 168. 1. The old name is still used in some locations for backward compatibility, in particular, the IIS Manager. By default the Mount Server role is assigned to the repository, but this can be delegated out to any Windows based server at the remote site, which runs under the service ‘Veeam Mount Service’ The VBR Server communicates with the Mount Server over ports TCP 9401 and TCP 6170 by default Oct 13, 2015 · I'm trying to understand the behavior, because my expectation is that specifying the "veeam" zone in the files above it should limit where Veeam opens ports. Cheers!. Backup proxy. The following table describes network ports that must be open to ensure proper communication of workers with other backup infrastructure components. Veeam B&R creates Windows firewall rules for it's components when they're installed - it would be very nice if Veeam for M365 would do the same! Aug 15, 2024 · Port. As far as I know I have two options to fix this. I had a funny feeling about the windows firewall, because it is common for many applications to be blocked due to the windows firewall, once I disabled/turned it off on a server/PC, magic happens. Therefore, for the connection vCenter --> ESXi(s) port 443,902 (TCP) is required For clarification, here is the port list. Jun 6, 2024 · I running Veeam for backup some remote equipment's files, but the Veeam server has installed ESET endpoint. Veeam Agent Computer (Microsoft Windows) on EC2 Instance. Regards. Summary. From a command prompt run the Nov 21, 2014 · I must do that also, but the main problem is, that our firewall software doesnt have an option to use workstations own ip address. While the cloud gateway has to talk with the managing Veeam Backup & Replication server over TCP ports 6168 and 6160, it has to be reached only with the single TCP/UDP port used by the service over the internet. Dec 9, 2021 · Somehow he managed to reset the Windows firewall back to default which wiped all custom rules including the Veeam ones. Ports used as a management channel from the Veeam Plug-in server to the Repository/Gateway server. I figured out that often the firewall is the issue. The Dynamic RPC ports assigned to the temporary guest agents are the most common ports that cause this issue when Aug 14, 2012 · Veeam Community discussions and solutions for: Ports needed for NAS SMB Backup of File Shares and Object Storage Veeam Explorers can be installed on a machine hosting Veeam Backup for Microsoft 365 8 or the Veeam Backup for Microsoft 365 Console component. 6005 to 65535 Jan 25, 2024 · For every TCP connection that a backup job uses, one port from this range is assigned. Configure Connection to SSRS Server; Step 5. Keep Windows Firewall On and manual install the Veeam Installer Service (VeeamDeploySvc) Switch Windows Firewall Off and enable File and Printer Sharing during the first install; Option 1 – Keep the Windows Firewall On and add three new firewall rules. It uses 10001/tcp to talk to the Veeam server and a port in the range 2500/tcp to 5000/tcp to transfer data to an Windows repository. 111:8080" netsh winhttp set proxy proxy-server="proxy. This one you can get from the Azure management portal. Aug 16, 2024 · Default range of ports for the runtime component installed on the target or staging Oracle server to support restore operations. But even if port forwarding is done, I would need to list target systems. Ports used by the Veeam Guest Catalog service for replicating catalog data. Ports - User Guide for VMware vSphere Aug 15, 2024 · Ports used to deploy the runtime coordination process on the target machine. Dec 16, 2024 · Note: Microsoft Exchange (in particular, Client Access) expands standard Windows dynamic RPC port range to provide better scalability. Aug 16, 2024 · Default command port used for communication with Lenovo ThinkSystem DM/DG Series over HTTP. Feb 7, 2025 · As Microsoft Azure Plug-in for Veeam Backup & Replication is installed on the same machine where Veeam Backup & Replication runs, it uses the same ports as those described in the Veeam Backup & Replication User Guide, section Ports. exe). All ports are redirected to SRV-BRANCH-VEEAM except 443 and 902 to SRV-BRANCH-HOST - Add SRV-BRANCH-VEEAM into “Backup Infrastructure => Wan accelerator” : success - The opposite : still failing Well, my questions : Oct 3, 2024 · Veeam Backup for Proxmox VE automatically creates firewall rules for the ports required to allow communication between the Proxmox VE server, workers and the backup server. exe. What is the Ports List Finder? The tool brings together all the required ports from all the various Veeam Help Center pages into a single location. UDP and TCP port 135, 137, 138, 139 and 445 ? Feb 26, 2025 · Port. butler. Veeam Agent computer. Currently it only has VMware and Hyper-V ports; however, that will be changing soon and will have: VMware; Hyper-V; AHV; Enterprise Jul 18, 2024 · Hyper V environment-Active Directory/Domain Veeam 12 is on VM1 on my domain pc Backup repository is a VM2 on a hyper v host1 We have a firewall doing what firewalls do etc VM1 successfully added **VM2(**veeam backup repository) The problem: Tried adding a windows server VM3 to VM1(located on hyper v host2) - I get the network path & credentials Dec 16, 2024 · Note: Microsoft Exchange (in particular, Client Access) expands standard Windows dynamic RPC port range to provide better scalability. The problem is: I need to disable firewall in order to get a successful backup job. Those ports will only be associated with a VeeamAgent process when data is actively being transferred. If an environment was upgraded from a version of Veeam Backup & Replication before 10, all existing components that were managed before the upgrade will continue to use 2500-5000. So when Veeam backs up or restores data, it communicates via various ports between its components, the backed-up servers and the storage systems. 6. I will turn Veeam VSS back on when we go to v5. I realize I'm being lazy here, just wondering if someone has already done the work of figuring out the ports etc. 49152 to 65535 (for Microsoft Windows Server 2012 and later) Dynamic RPC port range. There are several physical servers, including SQL Server, which is also a cluster. You can simply create an ANY/ANY rule to allow all traffic, perform some tasks in VBR, then monitor what ports you see traffic flowing to/from and create rules based off of that. com <-- This one is needed for checking the SSL certificate of the Azure site. el6. Sep 14, 2023 · I suspect the windows firewall is enabled and you’ll need to disable it 1st if you’ve not allowed the ports. Port used by the Veeam. 2 all communication with the remote agent in question stopped. You can adjust the allowed port range for the dynamic TCP Ports. internal) through the ports TCP 80 and UDP 53, 123; Allow access to Ubuntu repositories that provide updates for the backup appliance. Note that both ports are required. Veeam Backup Agent computer (Windows) TCP. TCP: 9401 [Remote console only] Port used by the Veeam Backup & Replication console during Windows file-level recovery. Jul 26, 2018 · Noted, in order to use agent managed by backup server you should create protection group for the desired scope of machines and deploy agents via Veeam B&R server. net <-- The URL of your blob storage in Azure. After the installation, windows firewall will be activated again by the administrator. Apr 10, 2015 · The most annoying circumstance is Veeam Backup & Replication server 9. Not even a "DROP" or "ACCEPT" message from the said IP address of the VEEAM. TCP. The default range of transmission channel ports is available in the Used Ports section of the user guide. I'm reading some other stuff here but I don't really like the idea of such a long range of ports open. Dec 14, 2017 · NSX-t allows VMC customers to directly access the management network over the built-in firewall. Configure the DNS entry of the vCenter for local IP address usage. For example this command would set the proxy for all protocols to use proxy. If not, the firewall blocks the connection via the ports that Veeam uses for communication. TCP, UDP. When we start a job session, for each task we start VeeamAgent process. Feb 2, 2017 · I was wondering if anyone else has already run into this and created a solution - like a GPO that allows the veeam proxies access through the windows firewall. Initially I copied the automatically generated Veeam firewall rules on Proxys/Repo/Mount/B+R etc into group policies and this worked fine. Configuring this registry value will cause all new Veeam Agent for Linux deployments for the specified Protection Group(s) (specified by ID#) to use the assigned port for the Veeam Transport Service. i have Veeam B&R installed on a physical domain joined server 2012 r2. dynamically. Feb 29, 2012 · Veeam Community discussions and solutions for: Firewall ports and Endpoint Backup of Veeam Agent for Microsoft Windows Jan 10, 2025 · Default port used by the Veeam Guest Catalog service for catalog replication. msocsp. Start the Veeam Agent for Microsoft Windows service after putting the registry value in place. Directing 1024/65535 worked, but this is a hell of a long range of ports. By default, this port is 6180, but the service provider may customize this if customers have strict egress firewall rules. Firewall Rules Backup server is a Windows 7 machine, destination proxy another Windows 7 machine. Data between the Veeam Agent computer and backup repositories is transferred directly, bypassing Veeam backup servers. TCP Port 443 needs to be opened from all Veeam Backup and VMware Backup Proxy servers as a Source with the vCenter internal IP as a target. For more information on the Veeam SQL Restore Service runtime component, see How Data Recovery Works. Feb 19, 2024 · hi veeam communityI want to turn on the firewall of the backup server and configure the firewallI have veeam backup and enterprise manager on my serverThe servers that are backed up are mostly on hyper-v cluster. General Security Jul 30, 2018 · Sometimes it is impossible to enable the necessary Firewall rules required by Veeam ONE using Windows Firewall UI. blob. In addition, Microsoft Azure Plug-in for Veeam Backup & Replication also uses ports listed in the following table. Veeam Agent for Windows can backup directly to Veeam Cloud Connect infrastructure via single port configured on Veeam Cloud Gateway. Nov 22, 2018 · The problem I have now with the centralized approach is that there are multiple ports needed to stay in touch with my remote systems. Sep 7, 2021 · Keep Windows Firewall On and add three new firewall rules. So, now I can connect my agent to the server. 135, 137 to 139, 6160, 11731. Setup: Linux Agent: Centos 6 2. On the server hosting the Web UI, open Internet Information Services (IIS) Manager (InetMgr. 254. The previous person in the job had allowed the firewall traffic through with no restrictions and this issue happened when I tightened up the firewall rules. Depending on the repository type, you should open the ports for communication with the source proxy and also those required for communication with Windows or Linux server, depending on the platform used. For more information, see this Microsoft article. By default, port 9392 is used. I looked at the pfirewall. Jan 4, 2017 · Perry, The firewall rules are created on the Backup & Replication server. If that's the backup server, then you have to open this ports. With Linux OS, you may need to. TCP Jan 7, 2025 · Port used as a control channel from the Veeam Plug-in server to the target Linux host. So i guess, what is the difference between this mode and managed mode? Sep 9, 2024 · I will start at the beginning. Backup. I think the reason for this is I have never been able to find documented firewall rules for deploying workstation Veeam agents, only for running them. 6005 to 65535 Jan 24, 2012 · Hello Fabian, thanks a lot for your reply - straight to the point! That is exactly the answer I was looking for. If port 6184 is already in use, Veeam Plug-in Service tries to use the next port number in the allocated range (6184 to 6194). tld:8080" Feb 24, 2024 · I'm just starting to get involved with Veeam Backup & Replication and I'm facing a situation like the one described in this post, including the same third-party software (Qualys). Port 111 is used by the port mapper service. Veeam Backup service port. tozv adzeuf fhbtw oqkltz nvta yjbve flol affnwmn syygd rsmzk mvjrwb elv uval cfvhe bhrtuvt