Veeam firewall ports windows Default command port used for communication with Lenovo ThinkSystem DM/DG Series over HTTPS. Veeam Backup & Replication, however, cannot add firewall exclusions to hardware or third-party software firewalls. Port required for remote network discovery of computers in the client infrastructure. Update the -LocalPort value to specify the port being tested. This tries to open the Windows firewall for the application. Next step would be to configure backup job (which in you case can be managed by agent). domain. The host discovery runs directly against the ESXi hosts, not via the VC. Obviously if you also have a device between your windows servers such as a physical firewall you will need to also manually open those same ports through it. 10001. Backup proxy. Step 1. Jul 29, 2024 · To enable Veeam backups for your Windows servers, you'll need to open the following ports in your Windows Firewall: 1. Jun 21, 2023 · # firewall-cmd --permanent --zone=veeamonly --add-port=6162/tcp --permanent Ok now we have made the zone but we have not activated it yet. Apr 21, 2015 · I have read several guides and we are still struggling to get this set up. During setup, Veeam ONE automatically creates a firewall rule for the runtime process. 9396. Jul 6, 2023 · What are the ports and the protocol used by the Veeam backup server v12? I wanted to turn on my firewall, but don't want to cause the backup, replication or restore process to fail. That said, in case VM is not available on the network, FLR via VIX is performed, so in fact direct connection to it is not required. Default port used by Veeam Agent for Microsoft Windows operating in the managed mode for communication with the Veeam Backup server. TCP Apr 3, 2025 · Default port used to download Veeam Agent for Microsoft Windows setup file from the Veeam Installation Server. Happy if you can provide some help. Backup server, guest interaction proxy (Enterprise and Enterprise Plus editions) TCP. Jun 9, 2021 · The idea behind the tool was to make it easier to find all the ports you need for a Veeam solution. The challenge we're facing at the moment is we're unable to block this 9392 connection, creating a dedicated windows firewall rule to block 9392 appears to be ineffective. tld:8080". In this section, you can also find diagrams illustrating the interaction between Veeam Cloud Connect components and used ports in following scenarios: May 31, 2023 · Veeam ONE Server; Microsoft SQL Server; Veeam ONE UI; Walkthrough: Deploy and Configure Veeam ONE. 6005 to 65535 While the cloud gateway has to talk with the managing Veeam Backup & Replication server over TCP ports 6168 and 6160, it has to be reached only with the single TCP/UDP port used by the service over the internet. 9194. Jul 28, 2022 · I can't deploy Veeam agents to our workstations remotely as the deployments are blocked by workstation Windows Firewall. Veeam will create the firewall rules allowing you to re-enable the firewall after readding it back in. com <-- This one is needed for checking the SSL certificate of the Azure site. Install Veeam ONE Server; Step 3. Is this technically possible and supported with VEB ? Big question, what ports should be forwarded / opened between laptop <> Internet <> B&R server (suppose all Veeam components are installed on the B&R server) ? You signed in with another tab or window. During setup, Veeam Backup & Replication automatically creates a firewall rule for the runtime process. 1536 does not recognize PasswordAuthentification on the target system is not allowed but prints out a very confusing message instead: "Host rescan is required" when waiting for rescan job and unable to process the backup. Veeam Data Mover ports are Port 2500 to 3300. Check Managed Server Configuration. In this example, the port is owned by the VeeamDeploymentSvc process. But after having a look at Microsofts list, I completely understand why you would not like to include this list in a statical user guide. Thanks Aug 22, 2014 · Review the firewalls present in the environment to ensure accommodations have been made for the ports used by Veeam Backup & Replication. Jan 11, 2019 · Please advise how to configure the Windows Firewall to permit SQL database restores to a SQL server. Feb 26, 2025 · To learn about ports required to enable proper work of Veeam Agent for Microsoft Windows managed by Veeam Backup & Replication, see the Ports section in the Veeam Agent Management Guide. Jul 18, 2024 · Hyper V environment-Active Directory/Domain Veeam 12 is on VM1 on my domain pc Backup repository is a VM2 on a hyper v host1 We have a firewall doing what firewalls do etc VM1 successfully added **VM2(**veeam backup repository) The problem: Tried adding a windows server VM3 to VM1(located on hyper v host2) - I get the network path & credentials Apr 10, 2015 · The most annoying circumstance is Veeam Backup & Replication server 9. 49152 to 65535 Aug 16, 2024 · Default range of ports for the runtime component installed on the target or staging Oracle server to support restore operations. Configure Data Retention; Security Guidelines. In this example, no process is associated with the specified port. Microsoft Windows server used as a backup repository or gateway server. 111:8080" netsh winhttp set proxy proxy-server="proxy. UDP and TCP port 135, 137, 138, 139 and 445 ? Sep 4, 2024 · On backup infrastructure components, Veeam Backup & Replication automatically creates firewall rules for the required ports. Veeam Agent Computer (Microsoft Windows) on EC2 Instance. May 11, 2021 · To do that, create firewall rules to connect to the address 169. Start the Veeam Agent for Microsoft Windows service after putting the registry value in place. Feb 24, 2024 · I'm just starting to get involved with Veeam Backup & Replication and I'm facing a situation like the one described in this post, including the same third-party software (Qualys). We want to backup to the B&R environment with VEB over the internet. Use the sintax below: Test-NetConnection -ComputerName <IP> -Port <port> Not sure what firewall you have, but nearly every NGFW will allow you to view traffic analysis from point to point. tld (192. x86_64 May 11, 2017 · The VAW documentation describes the TCP/IP ports used by VAW when sending the backup to a Veeam repository. internal) through the ports TCP 80 and UDP 53, 123; Allow access to Ubuntu repositories that provide updates for the backup appliance. If port 6184 is already in use, Veeam Plug-in Service tries to use the next port number in the allocated range (6184 to 6194). Each runtime component uses the next available port in the range, and only during application item restore. 2. Install Veeam ONE Web UI and Client; Step 4. Jan 25, 2011 · Veeam Community discussions and solutions for: 12. 6005 to 65535 May 19, 2022 · Veeam Backup Server. Required to manage inbound/outbound traffic when interacting with Veeam Explorer for Microsoft Exchange. In the case of this solution of changing the ports in Veeam, could you tell me exactly which ports and which registry keys need to be changed? Thanks in advance May 20, 2016 · Remote Office – with V9 Veeam Mount Server . I realize I'm being lazy here, just wondering if someone has already done the work of figuring out the ports etc. TCP port 9392 (Veeam Backup & Replication) May 5, 2023 · Use the following PowerShell command to check which process is locking a specific port. By default, this port is 6180, but the service provider may customize this if customers have strict egress firewall rules. I have the ports listed under "Windows Server Connections" open from the backup server to the guest interaction proxy. With Linux OS, you may need to. Keep Windows Firewall On and manual install the Veeam Installer Service (VeeamDeploySvc) Switch Windows Firewall Off and enable File and Printer Sharing during the first install; Option 1 – Keep the Windows Firewall On and add three new firewall rules. Ports used as a management channel from the Veeam Plug-in server to the Repository/Gateway server. For such setup you would need to keep port 10005 opened as was mentioned in Agent Management guide. 169. 1. When we start a job session, for each task we start VeeamAgent process. For more information, see this Microsoft KB article. Veeam Agent computer. Here are some examples of the most important ports: TCP port 10001 to 10300: These ports are used for communication between the Veeam backup server and the proxy servers and repositories. Sep 5, 2011 · Your Agents only require access to their primary backup repository. Best regards Jean-Philippe Nov 7, 2016 · I know the agent handles the Windows firewall rules, but I have to talk to people in three different departments to get firewall rules and ACLs adjusted on all the equipment between the Veeam server and the Windows client, and can't do that when the rules aren't listed. Backup. There are several physical servers, including SQL Server, which is also a cluster. This one you can get from the Azure management portal. 6. The way to activate it is by reloading the rules from disk Hi Mike, thanks for your fast reply. May 8, 2021 · 6 - Use Windows Firewall with only necessary ports. Apr 7, 2013 · So we're trying to restrict Veeam Console access by blocking port 9392 (Veeam Console port) to the VBR server from all sources except for the management server IP address. #1 Global Leader in Data Resilience Feb 19, 2025 · Each runtime component uses the next available port in the range, and only during application item restore. Configuring this registry value will cause all new Veeam Agent for Linux deployments for the specified Protection Group(s) (specified by ID#) to use the assigned port for the Veeam Transport Service. i have Veeam B&R installed on a physical domain joined server 2012 r2. Lenovo ThinkSystem DM/DG Series storage system. 254 (metadata. Dec 28, 2014 · great integration with Veeam B&R now, regarding VEB repositories. 2500 to 2600. blob. The Windows firewall is not the strongest solution as a firewall, but's build-in, it's available, therefore use it as it should. net <-- The URL of your blob storage in Azure. This KB describes the possible options of enabling the rules. Ports used by the Veeam Guest Catalog service for replicating catalog data. Default port used by Veeam Agent for Microsoft Windows operating in the standalone mode for communication with the Veeam Backup server. Ensure all firewalls involved have been configured according to the Required Ports for Management of Veeam Agent for Microsoft Windows deployments. Pre-create Veeam ONE Database (Optional) Step 2. Feb 18, 2020 · Re: Veeam proxy firewall ports Post by foggy » Fri Oct 02, 2020 9:59 pm this post Hi Kevin, these ports should be open in both directions, and please also consider the requirements for backup proxy and backup repository ports. 1. Mar 17, 2025 · Dynamic RPC port range for Microsoft Windows 2008 and later. Notes. The default range of transmission channel ports is available in the Used Ports section of the user guide. 6160. Dec 28, 2018 · If StoreOnce Catalyst operations pass through a firewall, the network administrator must open (TCP) ports 9387 (Command protocol) and 9388 (Data protocol). UDP. Therefore, for the connection vCenter --> ESXi(s) port 443,902 (TCP) is required For clarification, here is the port list. For more information on the Veeam SQL Restore Service runtime component, see How Data Recovery Works. Nov 7, 2012 · If I understand you right, it will be a repository server rather than a proxy server. Jul 14, 2014 · I have a Windows Server 2012R2/vSphere environment and configure Windows Firewall via group policy to secure our internal network. It doesn’t provide mapping for specific hosts or any of the advanced feature that the Veeam Ports Tool provides. TCP port 445 (SMB/CIFS) 3. Oct 13, 2015 · I'm trying to understand the behavior, because my expectation is that specifying the "veeam" zone in the files above it should limit where Veeam opens ports. dltrmhnz vsdrb oatia grtpu kqdcoyf ctwa jmetqvzb hfac qndzaen tsyn ogcxaw phz qjzs nzjixzp ekbee