Veeam firewall ports windows James Wilmoth (TitaniumCoder477) faced a similar problem and wrote a PowerShell script to recreate the required firewall rules alongside some Jan 16, 2015 · Prabhash, please review the full list of ports required for Veeam B&R components. In the case of this solution of changing the ports in Veeam, could you tell me exactly which ports and which registry keys need to be changed? Thanks in advance May 20, 2016 · Remote Office – with V9 Veeam Mount Server . The host discovery runs directly against the ESXi hosts, not via the VC. Jan 10, 2025 · Default port used by the Veeam Guest Catalog service for catalog replication. The first VeeamAgent process will start with Port 2500, the second will use Port 2501, Nov 28, 2011 · If you have a stateful firewall (read: any firewall other than "dumb" network switch ACLs), these would not typically need to be opened explicitly - the firewall would automatically maintain a state table and dynamically open and close these return ports as needed. Feb 29, 2012 · Veeam Community discussions and solutions for: Firewall ports and Endpoint Backup of Veeam Agent for Microsoft Windows Feb 20, 2024 · And, when you install Veeam and its components (Proxies, Repos, etc), the installer already creates needed Windows f/w rules on the servers, as you can see from the Ports page in the Guide (see below): Veeam Ports. Default ports Sep 4, 2024 · On backup infrastructure components, Veeam Backup & Replication automatically creates firewall rules for the required ports. windows. Nov 7, 2012 · If I understand you right, it will be a repository server rather than a proxy server. TCP port 135 (RPC) 2. blob. Feb 26, 2025 · To learn about ports required to enable proper work of Veeam Agent for Microsoft Windows managed by Veeam Backup & Replication, see the Ports section in the Veeam Agent Management Guide. If you are using a third-party firewall, these rules must be created manually. That said, in case VM is not available on the network, FLR via VIX is performed, so in fact direct connection to it is not required. 111) port 8080: netsh winhttp set proxy proxy-server="192. Configuring this registry value will cause all new Veeam Agent for Linux deployments for the specified Protection Group(s) (specified by ID#) to use the assigned port for the Veeam Transport Service. The Windows firewall is not the strongest solution as a firewall, but's build-in, it's available, therefore use it as it should. Once the service takes the next available port, it makes it the default port for all subsequent connections. Dec 28, 2018 · If StoreOnce Catalyst operations pass through a firewall, the network administrator must open (TCP) ports 9387 (Command protocol) and 9388 (Data protocol). UDP. Jul 29, 2024 · To enable Veeam backups for your Windows servers, you'll need to open the following ports in your Windows Firewall: 1. You can adjust the allowed port range for the dynamic TCP Ports. TCP/UDP-Port 135: Wird für die RPC-Kommunikation benötigt. If that's the backup server, then you have to open this ports. 6005 to 65535 While the cloud gateway has to talk with the managing Veeam Backup & Replication server over TCP ports 6168 and 6160, it has to be reached only with the single TCP/UDP port used by the service over the internet. It uses 10001/tcp to talk to the Veeam server and a port in the range 2500/tcp to 5000/tcp to transfer data to an Windows repository. Feb 26, 2025 · Ports used locally on the Veeam Agent computer for communication between Veeam Agent components and Veeam Agent for Microsoft Windows Service. 111. msocsp. If port 9395 or 6183 is already in use, Veeam Agent for Microsoft Windows Service will try to use the next port number. 254. 5. veeambp. 32-642. These ports show up in our firewall log. We have already had a fight with the required firewall ports not being complete on the guide (you have to read a combinations of about 4 different port lists to cover everything). Jun 6, 2024 · Veeam Community discussions and solutions for: Firewall ports unblocking of Veeam Agent for Microsoft Windows 4 days ago · Ports used by the Veeam Backup & Replication console to communicate with the backup server. domain. This tries to open the Windows firewall for the application. net <-- The URL of your blob storage in Azure. 6160. After doing a little research, I stumbled across a post on the Veeam R&D forum. Next step would be to configure backup job (which in you case can be managed by agent). These rules allow communication between the components. For more information, see this Microsoft KB article. 169. 49152 to 65535 Aug 16, 2024 · Default range of ports for the runtime component installed on the target or staging Oracle server to support restore operations. Jul 18, 2024 · Hyper V environment-Active Directory/Domain Veeam 12 is on VM1 on my domain pc Backup repository is a VM2 on a hyper v host1 We have a firewall doing what firewalls do etc VM1 successfully added **VM2(**veeam backup repository) The problem: Tried adding a windows server VM3 to VM1(located on hyper v host2) - I get the network path & credentials Apr 10, 2015 · The most annoying circumstance is Veeam Backup & Replication server 9. 443. 445. 0. To access the backup repository (Windows server) we need to open a lot of ports (RPC port range, etc. Protection Group-Specifc Custom Transport Service Port. You signed out in another tab or window. Jul 12, 2016 · In most cases for Veeam Backup & Replication, Veeam Agent for Microsoft Windows, and Veeam Agent for Linux, the relevant traffic will be between servers when data is transferred over the transport ports of 2500-3300 (TCP). Apr 7, 2013 · So we're trying to restrict Veeam Console access by blocking port 9392 (Veeam Console port) to the VBR server from all sources except for the management server IP address. In this section, you can also find diagrams illustrating the interaction between Veeam Cloud Connect components and used ports in following scenarios: May 31, 2023 · Veeam ONE Server; Microsoft SQL Server; Veeam ONE UI; Walkthrough: Deploy and Configure Veeam ONE. Veeam Backup Server. We are getting our IP addresses from the dhcp server, let's say that we got an IP 192. In this example, no process is associated with the specified port. During setup, Veeam ONE automatically creates a firewall rule for the runtime process. For more information on the Veeam SQL Restore Service runtime component, see How Data Recovery Works. Veeam Backup & Replication, however, cannot add firewall exclusions to hardware or third-party software firewalls. Start the Veeam Agent for Microsoft Windows service after putting the registry value in place. Port 111 is used by the port mapper service. Step 1. Note: You must manually open this port range in Microsoft Windows Firewall. 1. Can be customized during Veeam Backup & Replication installation. 1 backup console new firewall port 9420 requirement - R&D Forums R&D Forums May 3, 2017 · I'm backing up windows VM's from a customers network that is hosted on our private cloud platform to our Veeam platform and have a locked down rule on our Veeam platform firewall that only allows 10001 and 2500-5000 through, this allows the Veeam agent to backup to our platform without any problems at all, the problem with the 2500-5000 range Apr 2, 2025 · To learn what ports are required for other Veeam Backup & Replication components in the Veeam Cloud Connect infrastructure, see the Ports section in the Veeam Backup & Replication User Guide. 2. Default port used by Veeam Agent for Microsoft Windows operating in the managed mode for communication with the Veeam Backup server. When we start a job session, for each task we start VeeamAgent process. 9396. Veeam Backup Agent computer (Windows) TCP. The way to activate it is by reloading the rules from disk Hi Mike, thanks for your fast reply. Setup: Linux Agent: Centos 6 2. Obviously if you also have a device between your windows servers such as a physical firewall you will need to also manually open those same ports through it. Ports used as a management channel from the Veeam Plug-in server to the Repository/Gateway server. For such setup you would need to keep port 10005 opened as was mentioned in Agent Management guide. By default, this port is 6180, but the service provider may customize this if customers have strict egress firewall rules. There are several physical servers, including SQL Server, which is also a cluster. Jun 9, 2021 · The idea behind the tool was to make it easier to find all the ports you need for a Veeam solution. Oct 13, 2015 · I'm trying to understand the behavior, because my expectation is that specifying the "veeam" zone in the files above it should limit where Veeam opens ports. My que Dec 4, 2024 · Dynamic RPC port range for Microsoft Windows 2008 and later. Here's the "veeam" zone without the IPs ( 6160/tcp 6162/tcp 2501/tcp 2504/tcp were added dynamically by the Veeam services ): New veeam user here, haven't spent any money yet but happy to shell out $100-300 for a lifetime license (if those exist) if veeam can do what I want in its paid versions. #1 Global Leader in Data Resilience Feb 19, 2025 · Each runtime component uses the next available port in the range, and only during application item restore. Ensure all firewalls involved have been configured according to the Required Ports for Management of Veeam Agent for Microsoft Windows deployments. Within the Veeam console, click Backup Infrastructure Hier beispielhaft einige der wichtigsten Ports: Veeam Backup & Replication: TCP-Port 10001 bis 10300: Diese Ports werden für die Kommunikation zwischen dem Veeam-Backup-Server und den Proxy-Servern sowie den Repositories verwendet. Each runtime component uses the next available port in the range, and only during application item restore. Microsoft Windows server performing the role of a backup repository. TCP Apr 3, 2025 · Default port used to download Veeam Agent for Microsoft Windows setup file from the Veeam Installation Server. I think the reason for this is I have never been able to find documented firewall rules for deploying workstation Veeam agents, only for running them. Jan 7, 2025 · Port used as a control channel from the Veeam Plug-in server to the target Linux host. 2. Microsoft Windows server used as a backup repository or gateway server. TCP port 902 (Veeam Data Mover) Additionally, if you're using Veeam Backup & Replication, you may also need to open: 1. Nov 19, 2024 · The Veeam VBR server not only needs to talk to the vCenter, it also needs to talk to the ESXi servers. From a command prompt run the Nov 21, 2014 · I must do that also, but the main problem is, that our firewall software doesnt have an option to use workstations own ip address. 4 days ago · On backup infrastructure components, Veeam Backup & Replication automatically creates firewall rules for the required ports on Windows-based machines. TCP UDP. You can simply create an ANY/ANY rule to allow all traffic, perform some tasks in VBR, then monitor what ports you see traffic flowing to/from and create rules based off of that. It doesn’t provide mapping for specific hosts or any of the advanced feature that the Veeam Ports Tool provides. Can you ensue that no other application is using 6184? Jun 23, 2017 · We have some endpoints in our production environment that are located in separate LAN segments behind a firewall for security purpose. Make sure to open this port on the Veeam Backup for Microsoft 365 server. 1536 does not recognize PasswordAuthentification on the target system is not allowed but prints out a very confusing message instead: "Host rescan is required" when waiting for rescan job and unable to process the backup. Note that both ports are required. Feb 18, 2020 · Re: Veeam proxy firewall ports Post by foggy » Fri Oct 02, 2020 9:59 pm this post Hi Kevin, these ports should be open in both directions, and please also consider the requirements for backup proxy and backup repository ports. rhq vbj zqmvl qnlp rjbri tqhtob pat mfjip yvhj bmoi xnth gluqu pmz bbeigblg gez