Veeam firewall ports windows.
Veeam firewall ports windows You can always just have a look at windows firewall to verify. But even if port forwarding is done, I would need to list target systems. Use the sintax below: Test-NetConnection -ComputerName <IP> -Port <port> Jan 11, 2019 · Please advise how to configure the Windows Firewall to permit SQL database restores to a SQL server. Veeam Agent computer. TCP/UDP-Port 135: Wird für die RPC-Kommunikation benötigt. Feb 26, 2025 · To learn about ports required to enable proper work of Veeam Agent for Microsoft Windows managed by Veeam Backup & Replication, see the Ports section in the Veeam Agent Management Guide. Veeam will create the firewall rules allowing you to re-enable the firewall after readding it back in. Veeam Backup for Microsoft 365 server. 169. Configure Connection to SSRS Server; Step 5. 445. Feb 18, 2020 · Re: Veeam proxy firewall ports Post by foggy » Fri Oct 02, 2020 9:59 pm this post Hi Kevin, these ports should be open in both directions, and please also consider the requirements for backup proxy and backup repository ports. TCP Sep 7, 2017 · Key Location: HKLM\SOFTWARE\Veeam\Veeam Endpoint Backup\ Value Name: EndPoint_Rpc_Transport_Port Value Type: DWORD (32-bit) Value Value Data(Dec): <available_port>* *For the Value data, specify an available idle port. 254 (metadata. 1. 2500 to 2600. 135, 137 to 139, 445. Jul 30, 2018 · Sometimes it is impossible to enable the necessary Firewall rules required by Veeam ONE using Windows Firewall UI. 6. Which ports must be opened on the firewall to allow access from my Veeam Backup server/software to a NAS device on the DR site ? The Veeam backup will be configured to make the normal backups on a local available NAS and do a copy of it to the DR site for. Port 443 must be open on the machine that runs the master management agent. . Default ports Nov 7, 2016 · I know the agent handles the Windows firewall rules, but I have to talk to people in three different departments to get firewall rules and ACLs adjusted on all the equipment between the Veeam server and the Windows client, and can't do that when the rules aren't listed. TCP port 9392 (Veeam Backup & Replication) May 23, 2024 · Before enabling the Windows Server firewall on all of my Veeam Backup servers, what are the ports or the rule I must manually add under: Code: Select all Control Panel\System and Security\Windows Defender Firewall\Allowed apps Jun 6, 2024 · Veeam Community discussions and solutions for: Firewall ports unblocking of Veeam Agent for Microsoft Windows Per the documentation you linked, (at the top) veeam should automatically add all required ports in windows firewall. Jul 14, 2014 · I have a Windows Server 2012R2/vSphere environment and configure Windows Firewall via group policy to secure our internal network. Microsoft Windows server used as a backup repository or gateway server. Sep 6, 2022 · However, by default telnet client is not installed during Windows Server and the Veeam Backup Server often is our principal component our backup infrastructure. For more information, see this Microsoft KB article. During setup, Veeam Backup & Replication automatically creates a firewall rule for the runtime process. From a command prompt run the Nov 21, 2014 · I must do that also, but the main problem is, that our firewall software doesnt have an option to use workstations own ip address. You can find the lists of the ports in the following sections of the Veeam Backup & Replication User Guide: Feb 2, 2017 · I was wondering if anyone else has already run into this and created a solution - like a GPO that allows the veeam proxies access through the windows firewall. ocsp. If not, the firewall blocks the connection via the ports that Veeam uses for communication. Jun 21, 2023 · # firewall-cmd --permanent --zone=veeamonly --add-port=6162/tcp --permanent Ok now we have made the zone but we have not activated it yet. Can be customized during Veeam Backup & Replication installation. Note that both ports are required. 9396. Turning the firewall OFF allows the restore to proceed, but my preference is either: For the Veeam software to open the firewall ports it needs by itself, just like it says in the manual. Next step would be to configure backup job (which in you case can be managed by agent). For more information on the Veeam SQL Restore Service runtime component, see How Data Recovery Works. TCP port 135 (RPC) 2. So theoretically, you shouldn’t need to manipulate your Windows f/w. xxx. Apr 3, 2025 · Default port used to download Veeam Agent for Microsoft Windows setup file from the Veeam Installation Server. Ports used by the Veeam Guest Catalog service for replicating catalog data. Jul 26, 2018 · Noted, in order to use agent managed by backup server you should create protection group for the desired scope of machines and deploy agents via Veeam B&R server. internal) through the ports TCP 80 and UDP 53, 123; Allow access to Ubuntu repositories that provide updates for the backup appliance. UDP. core. 135, 137 to 139, 6160, 11731. Target machine with Microsoft SQL Server, staging server Sep 4, 2024 · On backup infrastructure components, Veeam Backup & Replication automatically creates firewall rules for the required ports. net <-- The URL of your blob storage in Azure. 34 Veeam agent then tries to connect 127. x86_64 Not sure what firewall you have, but nearly every NGFW will allow you to view traffic analysis from point to point. Jul 29, 2024 · To enable Veeam backups for your Windows servers, you'll need to open the following ports in your Windows Firewall: 1. We are getting our IP addresses from the dhcp server, let's say that we got an IP 192. 9194. What is the Ports List Finder? The tool brings together all the required ports from all the various Veeam Help Center pages into a single location. Mar 17, 2025 · Dynamic RPC port range for Microsoft Windows 2008 and later. Note: If you use default Microsoft Windows firewall settings, you do not need to configure dynamic RPC ports. That said, in case VM is not available on the network, FLR via VIX is performed, so in fact direct connection to it is not required. For this communication to function smoothly, certain ports must be enabled in the firewall. In order to access the Veeam Ports finder tool please navigate to https://www. Feb 20, 2024 · And, when you install Veeam and its components (Proxies, Repos, etc), the installer already creates needed Windows f/w rules on the servers, as you can see from the Ports page in the Guide (see below): Veeam Ports. Only the 111 is mentionned. Jan 14, 2014 · Hi Mike, thanks for your fast reply. Port required for remote network discovery of computers in the client infrastructure. Backup. TCP-Port 443: Für die sichere Kommunikation über Mar 26, 2015 · You just have to open your firewall from your Veeam server to two hosts: 1. Those ports will only be associated with a VeeamAgent process when data is actively being transferred. The 6184 port in the question is used locally for Veeam agent components communication. Default port used by Veeam Agent for Microsoft Windows operating in the standalone mode for communication with the Veeam Backup server. May 31, 2023 · Veeam ONE Server; Microsoft SQL Server; Veeam ONE UI; Walkthrough: Deploy and Configure Veeam ONE. el6. Data between the Veeam Agent computer and backup repositories is transferred directly, bypassing Veeam backup servers. 49152 to 65535 Mar 23, 2015 · In the Veeam ports list the 1058 is only required from Backup server to Windows server using vpower services (that rule is ok for me) but can't find that from ESXi to Windows server using vpower services that the 1058 is required. Setup: Linux Agent: Centos 6 2. Hier beispielhaft einige der wichtigsten Ports: Veeam Backup & Replication: TCP-Port 10001 bis 10300: Diese Ports werden für die Kommunikation zwischen dem Veeam-Backup-Server und den Proxy-Servern sowie den Repositories verwendet. Make sure to open this port on the Veeam Backup for Microsoft 365 server. 49152 to 65535 (for Microsoft Windows Server 2012 and later) Dynamic RPC port range. Dec 9, 2021 · Somehow he managed to reset the Windows firewall back to default which wiped all custom rules including the Veeam ones. Feb 26, 2025 · Ports used locally on the Veeam Agent computer for communication between Veeam Agent components and Veeam Agent for Microsoft Windows Service. Pre-create Veeam ONE Database (Optional) Step 2. If port 6184 is already in use, Veeam Plug-in Service tries to use the next port number in the allocated range (6184 to 6194). You can find the lists of the ports in the following sections of the Veeam Backup & Replication User Guide: Sep 4, 2024 · On backup infrastructure components, Veeam Backup & Replication automatically creates firewall rules for the required ports. Feb 19, 2025 · Each runtime component uses the next available port in the range, and only during application item restore. exe. Just open the necessary ports needed for Veeam to communicate with the necessary May 11, 2021 · To do that, create firewall rules to connect to the address 169. Jun 24, 2019 · Good day Kindly assist me. 10001. Ubuntu repositories are almost entirely defined by FQDNs that do not have static addresses behind them. With Linux OS, you may need to. Can you ensue that no other application is using 6184? Apr 25, 2017 · Ports 2500-5000 have an IPTABLES rule to allow forward traffic between devices, as well as a rule for 10002 for the backup agent. General Security Jan 10, 2025 · Default port used by the Veeam Guest Catalog service for catalog replication. For such setup you would need to keep port 10005 opened as was mentioned in Agent Management guide. 2. google. Jul 26, 2018 · Windows agent has a port failover logic, so if during Veeam Agent Service start the needed port is occupied by any other process, agent service will start to use next port it the list. Initially I copied the automatically generated Veeam firewall rules on Proxys/Repo/Mount/B+R etc into group policies and this worked fine. My configuration was looking like this: domain controller wi01: firewall currently switched off (I know it's bad) veeam-Server outbound traffic is allowed Feb 26, 2025 · Port. 0. Jun 8, 2017 · If you have a stateful firewall (read: any firewall other than "dumb" network switch ACLs), these would not typically need to be opened explicitly - the firewall would automatically maintain a state table and dynamically open and close these return ports as needed. 168. We would like to show you a description here but the site won’t allow us. So, if you want to test some communication port without install telnet client, you can use PowerShell for it. windows. UDP and TCP port 135, 137, 138, 139 and 445 ? Dec 19, 2024 · Default port used for communication with Veeam Plug-in. This tries to open the Windows firewall for the application. The way to activate it is by reloading the rules from disk We would like to show you a description here but the site won’t allow us. Apr 18, 2025 · Ports used by the Veeam Backup & Replication console to communicate with the backup server. TCP port 445 (SMB/CIFS) 3. Veeam Backup Agent computer (Windows) TCP. Install Veeam ONE Server; Step 3. Jul 6, 2023 · What are the ports and the protocol used by the Veeam backup server v12? I wanted to turn on my firewall, but don't want to cause the backup, replication or restore process to fail. Also, the ports are used to deploy Veeam components. I realize I'm being lazy here, just wondering if someone has already done the work of figuring out the ports etc. 9401 [Remote console only] Port used by the Veeam Backup & Replication console during Windows file-level recovery. com and select ‘Ports List Finder’. My que May 5, 2023 · Veeam ONE Ports; Veeam Agent for Microsoft Windows Ports; Veeam Agent for Linux Ports; Ports 2500-3300 are dedicated to data transport. Required to manage inbound/outbound traffic when interacting with Veeam Explorer for Microsoft Exchange. If you are using a third-party firewall, these rules must be created manually. For every TCP connection that a backup job uses, one port from this range is assigned. TCP Jan 7, 2025 · Port used as a control channel from the Veeam Plug-in server to the target Linux host. Step 1. Dec 4, 2024 · Dynamic RPC port range for Microsoft Windows 2008 and later. Sep 14, 2023 · I suspect the windows firewall is enabled and you’ll need to disable it 1st if you’ve not allowed the ports. msocsp. 1 -> 192. May 8, 2021 · 6 - Use Windows Firewall with only necessary ports. TCP port 902 (Veeam Data Mover) Additionally, if you're using Veeam Backup & Replication, you may also need to open: 1. May 5, 2024 · Veeam Community discussions and solutions for: Ports for application aware processing of Microsoft Hyper-V So when Veeam backs up or restores data, it communicates via various ports between its components, the backed-up servers and the storage systems. #1 Global Leader in Data Resilience Sep 7, 2021 · Keep Windows Firewall On and add three new firewall rules. You can simply create an ANY/ANY rule to allow all traffic, perform some tasks in VBR, then monitor what ports you see traffic flowing to/from and create rules based off of that. Jul 19, 2016 · I am currently working on the firewall settings and yesterday I tried to create the rules I need for an active directory object restore. Configure Data Retention; Security Guidelines. If port 9395 or 6183 is already in use, Veeam Agent for Microsoft Windows Service will try to use the next port number. James Wilmoth (TitaniumCoder477) faced a similar problem and wrote a PowerShell script to recreate the required firewall rules alongside some Jan 16, 2015 · Prabhash, please review the full list of ports required for Veeam B&R components. After doing a little research, I stumbled across a post on the Veeam R&D forum. 2. These rules allow communication between the components. 32-642. Dec 3, 2018 · So starting from a client with newly installed Windows Server 2019, with default Windows firewall configuration and a VEEAM server with Windows Server 2016 (veeam has installed the Guest Interaction Proxy on this server by default), I have to create a client rule for open traffic coming from the 2016 server on ports: 135, 137, 139, 445 (6190, 6290 are not necessary). May 19, 2022 · Veeam Backup Server. Happy if you can provide some help. Install Veeam ONE Web UI and Client; Step 4. TCP port 9392 (Veeam Backup & Replication) May 23, 2024 · Before enabling the Windows Server firewall on all of my Veeam Backup servers, what are the ports or the rule I must manually add under: Code: Select all Control Panel\System and Security\Windows Defender Firewall\Allowed apps Jun 6, 2024 · Veeam Community discussions and solutions for: Firewall ports unblocking of Veeam Agent for Microsoft Windows Mar 6, 2023 · Per the documentation you linked, (at the top) veeam should automatically add all required ports in windows firewall. Keep the firewall on for all domains (public, private and if applicable domain). Start the Veeam Agent for Microsoft Windows service after putting the registry value in place. Once the service takes the next available port, it makes it the default port for all subsequent connections. This one you can get from the Azure management portal. Port used by the Veeam. Notes. Best regards Jean-Philippe Mar 24, 2025 · Make sure to open port on the Veeam Backup for Microsoft 365 server. Linux server performing the role of a backup repository. 2500 to 3300. Oct 6, 2016 · When the Guest Interaction Proxy connects to a Windows 2012 R2 VM (client) to run VSS for application aware backups there is a file uploaded being renamed to C:\WINDOWS\VeeamVssSupport\VeeamGuestHelper. veeambp. 34 using port 6183. com <-- This one is needed for checking the SSL certificate of the Azure site. 254. UIService process for managing database connections. Apr 18, 2025 · On backup infrastructure components, Veeam Backup & Replication automatically creates firewall rules for the required ports on Windows-based machines. During setup, Veeam ONE automatically creates a firewall rule for the runtime process. Ports used as a management channel from the Veeam Plug-in server to the Repository/Gateway server. Default range of ports used as data transmission channels. This KB describes the possible options of enabling the rules. Note: You must manually open this port range in Microsoft Windows Firewall. Veeam Explorer for Microsoft Exchange. There are several physical servers, including SQL Server, which is also a cluster. But after having a look at Microsofts list, I completely understand why you would not like to include this list in a statical user guide. The Windows firewall is not the strongest solution as a firewall, but's build-in, it's available, therefore use it as it should. Microsoft Windows server performing the role of a backup repository. TCP UDP. Jul 12, 2016 · In most cases, for Veeam Backup & Replication, Veeam Agent for Microsoft Windows, and Veeam Agent for Linux, the relevant traffic will be between servers when data is transferred over the transport ports of 2500-3300 (TCP). blob. Feb 19, 2024 · hi veeam communityI want to turn on the firewall of the backup server and configure the firewallI have veeam backup and enterprise manager on my serverThe servers that are backed up are mostly on hyper-v cluster. Feb 29, 2012 · Veeam Community discussions and solutions for: Firewall ports and Endpoint Backup of Veeam Agent for Microsoft Windows May 3, 2017 · I'm backing up windows VM's from a customers network that is hosted on our private cloud platform to our Veeam platform and have a locked down rule on our Veeam platform firewall that only allows 10001 and 2500-5000 through, this allows the Veeam agent to backup to our platform without any problems at all, the problem with the 2500-5000 range Feb 26, 2025 · To learn about ports required to enable proper work of Veeam Agent for Microsoft Windows managed by Veeam Backup & Replication, see the Ports section in the Veeam Agent Management Guide. TCP. Keep Windows Firewall On and manual install the Veeam Installer Service (VeeamDeploySvc) Switch Windows Firewall Off and enable File and Printer Sharing during the first install; Option 1 – Keep the Windows Firewall On and add three new firewall rules. Apr 7, 2015 · A few times now, I have run into a situation where I want to reset the Windows firewall to default to try and eliminate a symptom, but I am loath to do that because I would have to recreate all the Veeam firewall rules. Obviously if you also have a device between your windows servers such as a physical firewall you will need to also manually open those same ports through it. ebgnoj edzcc aehw mggld oabx crs vsldxq uafipf wgcddyxp qszv bfrgsm xqifa hoomv ahtqreb livp
Veeam firewall ports windows.
Veeam firewall ports windows You can always just have a look at windows firewall to verify. But even if port forwarding is done, I would need to list target systems. Use the sintax below: Test-NetConnection -ComputerName <IP> -Port <port> Jan 11, 2019 · Please advise how to configure the Windows Firewall to permit SQL database restores to a SQL server. Veeam Agent computer. TCP/UDP-Port 135: Wird für die RPC-Kommunikation benötigt. Feb 26, 2025 · To learn about ports required to enable proper work of Veeam Agent for Microsoft Windows managed by Veeam Backup & Replication, see the Ports section in the Veeam Agent Management Guide. Veeam will create the firewall rules allowing you to re-enable the firewall after readding it back in. Veeam Backup for Microsoft 365 server. 169. Configure Connection to SSRS Server; Step 5. 445. Feb 18, 2020 · Re: Veeam proxy firewall ports Post by foggy » Fri Oct 02, 2020 9:59 pm this post Hi Kevin, these ports should be open in both directions, and please also consider the requirements for backup proxy and backup repository ports. TCP Sep 7, 2017 · Key Location: HKLM\SOFTWARE\Veeam\Veeam Endpoint Backup\ Value Name: EndPoint_Rpc_Transport_Port Value Type: DWORD (32-bit) Value Value Data(Dec): <available_port>* *For the Value data, specify an available idle port. 254 (metadata. 1. 2500 to 2600. 135, 137 to 139, 445. Jul 30, 2018 · Sometimes it is impossible to enable the necessary Firewall rules required by Veeam ONE using Windows Firewall UI. 6. Which ports must be opened on the firewall to allow access from my Veeam Backup server/software to a NAS device on the DR site ? The Veeam backup will be configured to make the normal backups on a local available NAS and do a copy of it to the DR site for. Port 443 must be open on the machine that runs the master management agent. . Default ports Nov 7, 2016 · I know the agent handles the Windows firewall rules, but I have to talk to people in three different departments to get firewall rules and ACLs adjusted on all the equipment between the Veeam server and the Windows client, and can't do that when the rules aren't listed. TCP port 9392 (Veeam Backup & Replication) May 23, 2024 · Before enabling the Windows Server firewall on all of my Veeam Backup servers, what are the ports or the rule I must manually add under: Code: Select all Control Panel\System and Security\Windows Defender Firewall\Allowed apps Jun 6, 2024 · Veeam Community discussions and solutions for: Firewall ports unblocking of Veeam Agent for Microsoft Windows Per the documentation you linked, (at the top) veeam should automatically add all required ports in windows firewall. Jul 14, 2014 · I have a Windows Server 2012R2/vSphere environment and configure Windows Firewall via group policy to secure our internal network. Microsoft Windows server used as a backup repository or gateway server. Sep 6, 2022 · However, by default telnet client is not installed during Windows Server and the Veeam Backup Server often is our principal component our backup infrastructure. For more information, see this Microsoft KB article. During setup, Veeam Backup & Replication automatically creates a firewall rule for the runtime process. From a command prompt run the Nov 21, 2014 · I must do that also, but the main problem is, that our firewall software doesnt have an option to use workstations own ip address. You can find the lists of the ports in the following sections of the Veeam Backup & Replication User Guide: Feb 2, 2017 · I was wondering if anyone else has already run into this and created a solution - like a GPO that allows the veeam proxies access through the windows firewall. ocsp. If not, the firewall blocks the connection via the ports that Veeam uses for communication. Jun 21, 2023 · # firewall-cmd --permanent --zone=veeamonly --add-port=6162/tcp --permanent Ok now we have made the zone but we have not activated it yet. Can be customized during Veeam Backup & Replication installation. Note that both ports are required. 9396. Turning the firewall OFF allows the restore to proceed, but my preference is either: For the Veeam software to open the firewall ports it needs by itself, just like it says in the manual. Next step would be to configure backup job (which in you case can be managed by agent). For more information on the Veeam SQL Restore Service runtime component, see How Data Recovery Works. TCP port 135 (RPC) 2. So theoretically, you shouldn’t need to manipulate your Windows f/w. xxx. Apr 3, 2025 · Default port used to download Veeam Agent for Microsoft Windows setup file from the Veeam Installation Server. Ports used by the Veeam Guest Catalog service for replicating catalog data. Jul 26, 2018 · Noted, in order to use agent managed by backup server you should create protection group for the desired scope of machines and deploy agents via Veeam B&R server. internal) through the ports TCP 80 and UDP 53, 123; Allow access to Ubuntu repositories that provide updates for the backup appliance. UDP. core. 135, 137 to 139, 6160, 11731. Target machine with Microsoft SQL Server, staging server Sep 4, 2024 · On backup infrastructure components, Veeam Backup & Replication automatically creates firewall rules for the required ports. net <-- The URL of your blob storage in Azure. 34 Veeam agent then tries to connect 127. x86_64 Not sure what firewall you have, but nearly every NGFW will allow you to view traffic analysis from point to point. Jul 29, 2024 · To enable Veeam backups for your Windows servers, you'll need to open the following ports in your Windows Firewall: 1. We are getting our IP addresses from the dhcp server, let's say that we got an IP 192. 9194. What is the Ports List Finder? The tool brings together all the required ports from all the various Veeam Help Center pages into a single location. Mar 17, 2025 · Dynamic RPC port range for Microsoft Windows 2008 and later. Note: If you use default Microsoft Windows firewall settings, you do not need to configure dynamic RPC ports. That said, in case VM is not available on the network, FLR via VIX is performed, so in fact direct connection to it is not required. For this communication to function smoothly, certain ports must be enabled in the firewall. In order to access the Veeam Ports finder tool please navigate to https://www. Feb 20, 2024 · And, when you install Veeam and its components (Proxies, Repos, etc), the installer already creates needed Windows f/w rules on the servers, as you can see from the Ports page in the Guide (see below): Veeam Ports. Only the 111 is mentionned. Jan 14, 2014 · Hi Mike, thanks for your fast reply. Port required for remote network discovery of computers in the client infrastructure. Backup. TCP-Port 443: Für die sichere Kommunikation über Mar 26, 2015 · You just have to open your firewall from your Veeam server to two hosts: 1. Those ports will only be associated with a VeeamAgent process when data is actively being transferred. The 6184 port in the question is used locally for Veeam agent components communication. Default port used by Veeam Agent for Microsoft Windows operating in the standalone mode for communication with the Veeam Backup server. May 31, 2023 · Veeam ONE Server; Microsoft SQL Server; Veeam ONE UI; Walkthrough: Deploy and Configure Veeam ONE. el6. Data between the Veeam Agent computer and backup repositories is transferred directly, bypassing Veeam backup servers. 49152 to 65535 Mar 23, 2015 · In the Veeam ports list the 1058 is only required from Backup server to Windows server using vpower services (that rule is ok for me) but can't find that from ESXi to Windows server using vpower services that the 1058 is required. Setup: Linux Agent: Centos 6 2. Hier beispielhaft einige der wichtigsten Ports: Veeam Backup & Replication: TCP-Port 10001 bis 10300: Diese Ports werden für die Kommunikation zwischen dem Veeam-Backup-Server und den Proxy-Servern sowie den Repositories verwendet. Make sure to open this port on the Veeam Backup for Microsoft 365 server. 49152 to 65535 (for Microsoft Windows Server 2012 and later) Dynamic RPC port range. Dec 9, 2021 · Somehow he managed to reset the Windows firewall back to default which wiped all custom rules including the Veeam ones. Feb 26, 2025 · Ports used locally on the Veeam Agent computer for communication between Veeam Agent components and Veeam Agent for Microsoft Windows Service. Pre-create Veeam ONE Database (Optional) Step 2. If port 6184 is already in use, Veeam Plug-in Service tries to use the next port number in the allocated range (6184 to 6194). You can find the lists of the ports in the following sections of the Veeam Backup & Replication User Guide: Sep 4, 2024 · On backup infrastructure components, Veeam Backup & Replication automatically creates firewall rules for the required ports. Feb 19, 2025 · Each runtime component uses the next available port in the range, and only during application item restore. exe. Just open the necessary ports needed for Veeam to communicate with the necessary May 11, 2021 · To do that, create firewall rules to connect to the address 169. Jun 24, 2019 · Good day Kindly assist me. 10001. Ubuntu repositories are almost entirely defined by FQDNs that do not have static addresses behind them. With Linux OS, you may need to. Can you ensue that no other application is using 6184? Apr 25, 2017 · Ports 2500-5000 have an IPTABLES rule to allow forward traffic between devices, as well as a rule for 10002 for the backup agent. General Security Jan 10, 2025 · Default port used by the Veeam Guest Catalog service for catalog replication. For such setup you would need to keep port 10005 opened as was mentioned in Agent Management guide. 2. google. Jul 26, 2018 · Windows agent has a port failover logic, so if during Veeam Agent Service start the needed port is occupied by any other process, agent service will start to use next port it the list. Initially I copied the automatically generated Veeam firewall rules on Proxys/Repo/Mount/B+R etc into group policies and this worked fine. My configuration was looking like this: domain controller wi01: firewall currently switched off (I know it's bad) veeam-Server outbound traffic is allowed Feb 26, 2025 · Port. 0. Jun 8, 2017 · If you have a stateful firewall (read: any firewall other than "dumb" network switch ACLs), these would not typically need to be opened explicitly - the firewall would automatically maintain a state table and dynamically open and close these return ports as needed. 168. We would like to show you a description here but the site won’t allow us. So, if you want to test some communication port without install telnet client, you can use PowerShell for it. windows. UDP and TCP port 135, 137, 138, 139 and 445 ? Dec 19, 2024 · Default port used for communication with Veeam Plug-in. This tries to open the Windows firewall for the application. The way to activate it is by reloading the rules from disk We would like to show you a description here but the site won’t allow us. Apr 18, 2025 · Ports used by the Veeam Backup & Replication console to communicate with the backup server. TCP port 445 (SMB/CIFS) 3. Veeam Backup Agent computer (Windows) TCP. Install Veeam ONE Server; Step 3. Jul 6, 2023 · What are the ports and the protocol used by the Veeam backup server v12? I wanted to turn on my firewall, but don't want to cause the backup, replication or restore process to fail. Also, the ports are used to deploy Veeam components. I realize I'm being lazy here, just wondering if someone has already done the work of figuring out the ports etc. 9401 [Remote console only] Port used by the Veeam Backup & Replication console during Windows file-level recovery. com and select ‘Ports List Finder’. My que May 5, 2023 · Veeam ONE Ports; Veeam Agent for Microsoft Windows Ports; Veeam Agent for Linux Ports; Ports 2500-3300 are dedicated to data transport. Required to manage inbound/outbound traffic when interacting with Veeam Explorer for Microsoft Exchange. If you are using a third-party firewall, these rules must be created manually. For every TCP connection that a backup job uses, one port from this range is assigned. TCP Jan 7, 2025 · Port used as a control channel from the Veeam Plug-in server to the target Linux host. Step 1. Dec 4, 2024 · Dynamic RPC port range for Microsoft Windows 2008 and later. Sep 14, 2023 · I suspect the windows firewall is enabled and you’ll need to disable it 1st if you’ve not allowed the ports. msocsp. 1 -> 192. May 8, 2021 · 6 - Use Windows Firewall with only necessary ports. TCP port 902 (Veeam Data Mover) Additionally, if you're using Veeam Backup & Replication, you may also need to open: 1. May 5, 2024 · Veeam Community discussions and solutions for: Ports for application aware processing of Microsoft Hyper-V So when Veeam backs up or restores data, it communicates via various ports between its components, the backed-up servers and the storage systems. #1 Global Leader in Data Resilience Sep 7, 2021 · Keep Windows Firewall On and add three new firewall rules. You can simply create an ANY/ANY rule to allow all traffic, perform some tasks in VBR, then monitor what ports you see traffic flowing to/from and create rules based off of that. Jul 19, 2016 · I am currently working on the firewall settings and yesterday I tried to create the rules I need for an active directory object restore. Configure Data Retention; Security Guidelines. If port 9395 or 6183 is already in use, Veeam Agent for Microsoft Windows Service will try to use the next port number. James Wilmoth (TitaniumCoder477) faced a similar problem and wrote a PowerShell script to recreate the required firewall rules alongside some Jan 16, 2015 · Prabhash, please review the full list of ports required for Veeam B&R components. After doing a little research, I stumbled across a post on the Veeam R&D forum. 2. These rules allow communication between the components. 32-642. Dec 3, 2018 · So starting from a client with newly installed Windows Server 2019, with default Windows firewall configuration and a VEEAM server with Windows Server 2016 (veeam has installed the Guest Interaction Proxy on this server by default), I have to create a client rule for open traffic coming from the 2016 server on ports: 135, 137, 139, 445 (6190, 6290 are not necessary). May 19, 2022 · Veeam Backup Server. Happy if you can provide some help. Install Veeam ONE Web UI and Client; Step 4. TCP port 9392 (Veeam Backup & Replication) May 23, 2024 · Before enabling the Windows Server firewall on all of my Veeam Backup servers, what are the ports or the rule I must manually add under: Code: Select all Control Panel\System and Security\Windows Defender Firewall\Allowed apps Jun 6, 2024 · Veeam Community discussions and solutions for: Firewall ports unblocking of Veeam Agent for Microsoft Windows Mar 6, 2023 · Per the documentation you linked, (at the top) veeam should automatically add all required ports in windows firewall. Keep the firewall on for all domains (public, private and if applicable domain). Start the Veeam Agent for Microsoft Windows service after putting the registry value in place. Once the service takes the next available port, it makes it the default port for all subsequent connections. This one you can get from the Azure management portal. Port used by the Veeam. Notes. Best regards Jean-Philippe Mar 24, 2025 · Make sure to open port on the Veeam Backup for Microsoft 365 server. Linux server performing the role of a backup repository. 2500 to 3300. Oct 6, 2016 · When the Guest Interaction Proxy connects to a Windows 2012 R2 VM (client) to run VSS for application aware backups there is a file uploaded being renamed to C:\WINDOWS\VeeamVssSupport\VeeamGuestHelper. veeambp. 34 using port 6183. com <-- This one is needed for checking the SSL certificate of the Azure site. 254. UIService process for managing database connections. Apr 18, 2025 · On backup infrastructure components, Veeam Backup & Replication automatically creates firewall rules for the required ports on Windows-based machines. During setup, Veeam ONE automatically creates a firewall rule for the runtime process. Ports used as a management channel from the Veeam Plug-in server to the Repository/Gateway server. Default range of ports used as data transmission channels. This KB describes the possible options of enabling the rules. Note: You must manually open this port range in Microsoft Windows Firewall. Veeam Explorer for Microsoft Exchange. There are several physical servers, including SQL Server, which is also a cluster. But after having a look at Microsofts list, I completely understand why you would not like to include this list in a statical user guide. The Windows firewall is not the strongest solution as a firewall, but's build-in, it's available, therefore use it as it should. Microsoft Windows server performing the role of a backup repository. TCP UDP. Jul 12, 2016 · In most cases, for Veeam Backup & Replication, Veeam Agent for Microsoft Windows, and Veeam Agent for Linux, the relevant traffic will be between servers when data is transferred over the transport ports of 2500-3300 (TCP). blob. Feb 19, 2024 · hi veeam communityI want to turn on the firewall of the backup server and configure the firewallI have veeam backup and enterprise manager on my serverThe servers that are backed up are mostly on hyper-v cluster. Feb 29, 2012 · Veeam Community discussions and solutions for: Firewall ports and Endpoint Backup of Veeam Agent for Microsoft Windows May 3, 2017 · I'm backing up windows VM's from a customers network that is hosted on our private cloud platform to our Veeam platform and have a locked down rule on our Veeam platform firewall that only allows 10001 and 2500-5000 through, this allows the Veeam agent to backup to our platform without any problems at all, the problem with the 2500-5000 range Feb 26, 2025 · To learn about ports required to enable proper work of Veeam Agent for Microsoft Windows managed by Veeam Backup & Replication, see the Ports section in the Veeam Agent Management Guide. TCP. Keep Windows Firewall On and manual install the Veeam Installer Service (VeeamDeploySvc) Switch Windows Firewall Off and enable File and Printer Sharing during the first install; Option 1 – Keep the Windows Firewall On and add three new firewall rules. Apr 7, 2015 · A few times now, I have run into a situation where I want to reset the Windows firewall to default to try and eliminate a symptom, but I am loath to do that because I would have to recreate all the Veeam firewall rules. Obviously if you also have a device between your windows servers such as a physical firewall you will need to also manually open those same ports through it. ebgnoj edzcc aehw mggld oabx crs vsldxq uafipf wgcddyxp qszv bfrgsm xqifa hoomv ahtqreb livp