Veeam firewall ports windows.

Veeam firewall ports windows 135, 137 to 139, 6160, 11731. Setup: Linux Agent: Centos 6 2. There are several physical servers, including SQL Server, which is also a cluster. 135, 137 to 139, 445. Just open the necessary ports needed for Veeam to communicate with the necessary May 11, 2021 · To do that, create firewall rules to connect to the address 169. TCP Jan 7, 2025 · Port used as a control channel from the Veeam Plug-in server to the target Linux host. Backup. If port 6184 is already in use, Veeam Plug-in Service tries to use the next port number in the allocated range (6184 to 6194). Also, the ports are used to deploy Veeam components. Feb 19, 2024 · hi veeam communityI want to turn on the firewall of the backup server and configure the firewallI have veeam backup and enterprise manager on my serverThe servers that are backed up are mostly on hyper-v cluster. May 8, 2021 · 6 - Use Windows Firewall with only necessary ports. 34 using port 6183. Use the sintax below: Test-NetConnection -ComputerName <IP> -Port <port> Jan 11, 2019 · Please advise how to configure the Windows Firewall to permit SQL database restores to a SQL server. Apr 7, 2015 · A few times now, I have run into a situation where I want to reset the Windows firewall to default to try and eliminate a symptom, but I am loath to do that because I would have to recreate all the Veeam firewall rules. Mar 17, 2025 · Dynamic RPC port range for Microsoft Windows 2008 and later. Jun 21, 2023 · # firewall-cmd --permanent --zone=veeamonly --add-port=6162/tcp --permanent Ok now we have made the zone but we have not activated it yet. TCP-Port 443: Für die sichere Kommunikation über Mar 26, 2015 · You just have to open your firewall from your Veeam server to two hosts: 1. That said, in case VM is not available on the network, FLR via VIX is performed, so in fact direct connection to it is not required. During setup, Veeam ONE automatically creates a firewall rule for the runtime process. Veeam Agent computer. If port 9395 or 6183 is already in use, Veeam Agent for Microsoft Windows Service will try to use the next port number. Oct 6, 2016 · When the Guest Interaction Proxy connects to a Windows 2012 R2 VM (client) to run VSS for application aware backups there is a file uploaded being renamed to C:\WINDOWS\VeeamVssSupport\VeeamGuestHelper. windows. TCP Sep 7, 2017 · Key Location: HKLM\SOFTWARE\Veeam\Veeam Endpoint Backup\ Value Name: EndPoint_Rpc_Transport_Port Value Type: DWORD (32-bit) Value Value Data(Dec): <available_port>* *For the Value data, specify an available idle port. After doing a little research, I stumbled across a post on the Veeam R&D forum. Jul 6, 2023 · What are the ports and the protocol used by the Veeam backup server v12? I wanted to turn on my firewall, but don't want to cause the backup, replication or restore process to fail. msocsp. The Windows firewall is not the strongest solution as a firewall, but's build-in, it's available, therefore use it as it should. 9194. Default port used by Veeam Agent for Microsoft Windows operating in the standalone mode for communication with the Veeam Backup server. We would like to show you a description here but the site won’t allow us. Ports used by the Veeam Guest Catalog service for replicating catalog data. Notes. What is the Ports List Finder? The tool brings together all the required ports from all the various Veeam Help Center pages into a single location. TCP port 9392 (Veeam Backup & Replication) May 23, 2024 · Before enabling the Windows Server firewall on all of my Veeam Backup servers, what are the ports or the rule I must manually add under: Code: Select all Control Panel\System and Security\Windows Defender Firewall\Allowed apps Jun 6, 2024 · Veeam Community discussions and solutions for: Firewall ports unblocking of Veeam Agent for Microsoft Windows Mar 6, 2023 · Per the documentation you linked, (at the top) veeam should automatically add all required ports in windows firewall. x86_64 Not sure what firewall you have, but nearly every NGFW will allow you to view traffic analysis from point to point. You can find the lists of the ports in the following sections of the Veeam Backup & Replication User Guide: Feb 2, 2017 · I was wondering if anyone else has already run into this and created a solution - like a GPO that allows the veeam proxies access through the windows firewall. Ports used as a management channel from the Veeam Plug-in server to the Repository/Gateway server. These rules allow communication between the components. 9401 [Remote console only] Port used by the Veeam Backup & Replication console during Windows file-level recovery. exe. Data between the Veeam Agent computer and backup repositories is transferred directly, bypassing Veeam backup servers. Apr 3, 2025 · Default port used to download Veeam Agent for Microsoft Windows setup file from the Veeam Installation Server. 254 (metadata. Microsoft Windows server performing the role of a backup repository. 49152 to 65535 Mar 23, 2015 · In the Veeam ports list the 1058 is only required from Backup server to Windows server using vpower services (that rule is ok for me) but can't find that from ESXi to Windows server using vpower services that the 1058 is required. Can you ensue that no other application is using 6184? Apr 25, 2017 · Ports 2500-5000 have an IPTABLES rule to allow forward traffic between devices, as well as a rule for 10002 for the backup agent. Target machine with Microsoft SQL Server, staging server Sep 4, 2024 · On backup infrastructure components, Veeam Backup & Replication automatically creates firewall rules for the required ports. Feb 20, 2024 · And, when you install Veeam and its components (Proxies, Repos, etc), the installer already creates needed Windows f/w rules on the servers, as you can see from the Ports page in the Guide (see below): Veeam Ports. But even if port forwarding is done, I would need to list target systems. Feb 19, 2025 · Each runtime component uses the next available port in the range, and only during application item restore. Keep Windows Firewall On and manual install the Veeam Installer Service (VeeamDeploySvc) Switch Windows Firewall Off and enable File and Printer Sharing during the first install; Option 1 – Keep the Windows Firewall On and add three new firewall rules. 1. Start the Veeam Agent for Microsoft Windows service after putting the registry value in place. Jul 14, 2014 · I have a Windows Server 2012R2/vSphere environment and configure Windows Firewall via group policy to secure our internal network. TCP UDP. Install Veeam ONE Web UI and Client; Step 4. Happy if you can provide some help. With Linux OS, you may need to. ocsp. Default ports Nov 7, 2016 · I know the agent handles the Windows firewall rules, but I have to talk to people in three different departments to get firewall rules and ACLs adjusted on all the equipment between the Veeam server and the Windows client, and can't do that when the rules aren't listed. You can simply create an ANY/ANY rule to allow all traffic, perform some tasks in VBR, then monitor what ports you see traffic flowing to/from and create rules based off of that. 9396. Only the 111 is mentionned. Port used by the Veeam. Ubuntu repositories are almost entirely defined by FQDNs that do not have static addresses behind them. For such setup you would need to keep port 10005 opened as was mentioned in Agent Management guide. TCP port 445 (SMB/CIFS) 3. From a command prompt run the Nov 21, 2014 · I must do that also, but the main problem is, that our firewall software doesnt have an option to use workstations own ip address. This one you can get from the Azure management portal. My configuration was looking like this: domain controller wi01: firewall currently switched off (I know it's bad) veeam-Server outbound traffic is allowed Feb 26, 2025 · Port. If not, the firewall blocks the connection via the ports that Veeam uses for communication. Jun 24, 2019 · Good day Kindly assist me. blob. #1 Global Leader in Data Resilience Sep 7, 2021 · Keep Windows Firewall On and add three new firewall rules. UDP and TCP port 135, 137, 138, 139 and 445 ? Dec 19, 2024 · Default port used for communication with Veeam Plug-in. Note: If you use default Microsoft Windows firewall settings, you do not need to configure dynamic RPC ports. May 19, 2022 · Veeam Backup Server. 1 -> 192. For more information on the Veeam SQL Restore Service runtime component, see How Data Recovery Works. Dec 4, 2024 · Dynamic RPC port range for Microsoft Windows 2008 and later. Veeam Backup Agent computer (Windows) TCP. Required to manage inbound/outbound traffic when interacting with Veeam Explorer for Microsoft Exchange. veeambp. You can find the lists of the ports in the following sections of the Veeam Backup & Replication User Guide: Sep 4, 2024 · On backup infrastructure components, Veeam Backup & Replication automatically creates firewall rules for the required ports. Feb 29, 2012 · Veeam Community discussions and solutions for: Firewall ports and Endpoint Backup of Veeam Agent for Microsoft Windows May 3, 2017 · I'm backing up windows VM's from a customers network that is hosted on our private cloud platform to our Veeam platform and have a locked down rule on our Veeam platform firewall that only allows 10001 and 2500-5000 through, this allows the Veeam agent to backup to our platform without any problems at all, the problem with the 2500-5000 range Feb 26, 2025 · To learn about ports required to enable proper work of Veeam Agent for Microsoft Windows managed by Veeam Backup & Replication, see the Ports section in the Veeam Agent Management Guide. TCP port 902 (Veeam Data Mover) Additionally, if you're using Veeam Backup & Replication, you may also need to open: 1. 445. Pre-create Veeam ONE Database (Optional) Step 2. TCP/UDP-Port 135: Wird für die RPC-Kommunikation benötigt. Microsoft Windows server used as a backup repository or gateway server. Linux server performing the role of a backup repository. Note that both ports are required. TCP port 9392 (Veeam Backup & Replication) May 23, 2024 · Before enabling the Windows Server firewall on all of my Veeam Backup servers, what are the ports or the rule I must manually add under: Code: Select all Control Panel\System and Security\Windows Defender Firewall\Allowed apps Jun 6, 2024 · Veeam Community discussions and solutions for: Firewall ports unblocking of Veeam Agent for Microsoft Windows Per the documentation you linked, (at the top) veeam should automatically add all required ports in windows firewall. Jul 29, 2024 · To enable Veeam backups for your Windows servers, you'll need to open the following ports in your Windows Firewall: 1. I realize I'm being lazy here, just wondering if someone has already done the work of figuring out the ports etc. May 5, 2024 · Veeam Community discussions and solutions for: Ports for application aware processing of Microsoft Hyper-V So when Veeam backs up or restores data, it communicates via various ports between its components, the backed-up servers and the storage systems. Default range of ports used as data transmission channels. UDP. UIService process for managing database connections. Those ports will only be associated with a VeeamAgent process when data is actively being transferred. This tries to open the Windows firewall for the application. So, if you want to test some communication port without install telnet client, you can use PowerShell for it. So theoretically, you shouldn’t need to manipulate your Windows f/w. James Wilmoth (TitaniumCoder477) faced a similar problem and wrote a PowerShell script to recreate the required firewall rules alongside some Jan 16, 2015 · Prabhash, please review the full list of ports required for Veeam B&R components. For every TCP connection that a backup job uses, one port from this range is assigned. Jul 12, 2016 · In most cases, for Veeam Backup & Replication, Veeam Agent for Microsoft Windows, and Veeam Agent for Linux, the relevant traffic will be between servers when data is transferred over the transport ports of 2500-3300 (TCP). Obviously if you also have a device between your windows servers such as a physical firewall you will need to also manually open those same ports through it. Port 443 must be open on the machine that runs the master management agent. Next step would be to configure backup job (which in you case can be managed by agent). Hier beispielhaft einige der wichtigsten Ports: Veeam Backup & Replication: TCP-Port 10001 bis 10300: Diese Ports werden für die Kommunikation zwischen dem Veeam-Backup-Server und den Proxy-Servern sowie den Repositories verwendet. com and select ‘Ports List Finder’. 2. Apr 18, 2025 · On backup infrastructure components, Veeam Backup & Replication automatically creates firewall rules for the required ports on Windows-based machines. 2500 to 3300. Once the service takes the next available port, it makes it the default port for all subsequent connections. Best regards Jean-Philippe Mar 24, 2025 · Make sure to open port on the Veeam Backup for Microsoft 365 server. Jul 19, 2016 · I am currently working on the firewall settings and yesterday I tried to create the rules I need for an active directory object restore. Keep the firewall on for all domains (public, private and if applicable domain). Sep 14, 2023 · I suspect the windows firewall is enabled and you’ll need to disable it 1st if you’ve not allowed the ports. 32-642. Jul 26, 2018 · Windows agent has a port failover logic, so if during Veeam Agent Service start the needed port is occupied by any other process, agent service will start to use next port it the list. Step 1. May 31, 2023 · Veeam ONE Server; Microsoft SQL Server; Veeam ONE UI; Walkthrough: Deploy and Configure Veeam ONE. The 6184 port in the question is used locally for Veeam agent components communication. 2500 to 2600. TCP port 135 (RPC) 2. 49152 to 65535 (for Microsoft Windows Server 2012 and later) Dynamic RPC port range. Initially I copied the automatically generated Veeam firewall rules on Proxys/Repo/Mount/B+R etc into group policies and this worked fine. internal) through the ports TCP 80 and UDP 53, 123; Allow access to Ubuntu repositories that provide updates for the backup appliance. Make sure to open this port on the Veeam Backup for Microsoft 365 server. General Security Jan 10, 2025 · Default port used by the Veeam Guest Catalog service for catalog replication. 254. 0. Configure Connection to SSRS Server; Step 5. xxx. TCP. You can always just have a look at windows firewall to verify. 6. Configure Data Retention; Security Guidelines. Veeam will create the firewall rules allowing you to re-enable the firewall after readding it back in. core. Dec 9, 2021 · Somehow he managed to reset the Windows firewall back to default which wiped all custom rules including the Veeam ones. net <-- The URL of your blob storage in Azure. Feb 26, 2025 · Ports used locally on the Veeam Agent computer for communication between Veeam Agent components and Veeam Agent for Microsoft Windows Service. Jan 14, 2014 · Hi Mike, thanks for your fast reply. The way to activate it is by reloading the rules from disk We would like to show you a description here but the site won’t allow us. Port required for remote network discovery of computers in the client infrastructure. el6. My que May 5, 2023 · Veeam ONE Ports; Veeam Agent for Microsoft Windows Ports; Veeam Agent for Linux Ports; Ports 2500-3300 are dedicated to data transport. Feb 26, 2025 · To learn about ports required to enable proper work of Veeam Agent for Microsoft Windows managed by Veeam Backup & Replication, see the Ports section in the Veeam Agent Management Guide. 2. Veeam Explorer for Microsoft Exchange. Jul 30, 2018 · Sometimes it is impossible to enable the necessary Firewall rules required by Veeam ONE using Windows Firewall UI. Turning the firewall OFF allows the restore to proceed, but my preference is either: For the Veeam software to open the firewall ports it needs by itself, just like it says in the manual. 34 Veeam agent then tries to connect 127. 10001. Feb 18, 2020 · Re: Veeam proxy firewall ports Post by foggy » Fri Oct 02, 2020 9:59 pm this post Hi Kevin, these ports should be open in both directions, and please also consider the requirements for backup proxy and backup repository ports. com <-- This one is needed for checking the SSL certificate of the Azure site. Sep 6, 2022 · However, by default telnet client is not installed during Windows Server and the Veeam Backup Server often is our principal component our backup infrastructure. In order to access the Veeam Ports finder tool please navigate to https://www. But after having a look at Microsofts list, I completely understand why you would not like to include this list in a statical user guide. For more information, see this Microsoft KB article. Jul 26, 2018 · Noted, in order to use agent managed by backup server you should create protection group for the desired scope of machines and deploy agents via Veeam B&R server. . 169. Which ports must be opened on the firewall to allow access from my Veeam Backup server/software to a NAS device on the DR site ? The Veeam backup will be configured to make the normal backups on a local available NAS and do a copy of it to the DR site for. Can be customized during Veeam Backup & Replication installation. Note: You must manually open this port range in Microsoft Windows Firewall. google. For this communication to function smoothly, certain ports must be enabled in the firewall. If you are using a third-party firewall, these rules must be created manually. Jun 8, 2017 · If you have a stateful firewall (read: any firewall other than "dumb" network switch ACLs), these would not typically need to be opened explicitly - the firewall would automatically maintain a state table and dynamically open and close these return ports as needed. We are getting our IP addresses from the dhcp server, let's say that we got an IP 192. During setup, Veeam Backup & Replication automatically creates a firewall rule for the runtime process. Veeam Backup for Microsoft 365 server. This KB describes the possible options of enabling the rules. Apr 18, 2025 · Ports used by the Veeam Backup & Replication console to communicate with the backup server. Install Veeam ONE Server; Step 3. Dec 3, 2018 · So starting from a client with newly installed Windows Server 2019, with default Windows firewall configuration and a VEEAM server with Windows Server 2016 (veeam has installed the Guest Interaction Proxy on this server by default), I have to create a client rule for open traffic coming from the 2016 server on ports: 135, 137, 139, 445 (6190, 6290 are not necessary). 168. dkyhmb eazklie mjmqd bnfvr srtnf wvjhe hvejnii loqb skzo fmviw vlnpi swrwya hbkjcvg hitpzu pty