Make sure that you open ports listed below to enable proper work of Veeam Agent for Microsoft Windows.
From | To | Protocol | Port | Notes |
Veeam Agent Computer | Veeam Backup Server | TCP | 10001 | Default port used for communication with the Veeam Backup server. Data between the Veeam Agent computer and backup repositories is transferred directly, bypassing Veeam backup servers. |
Veeam Agent Computer | TCP | 9395, 6183 | Ports used locally on the Veeam Agent computer for communication between Veeam Agent components and Veeam Agent for Microsoft Windows Service. | |
Communication with Veeam Backup & Replication Repositories | ||||
Veeam Agent Computer | Linux server performing the role of a backup repository | TCP | 22 | Port used as a control channel from the Veeam Agent computer to the target Linux host. |
TCP | 2500 to 5000 | Default range of ports used as data transmission channels. For every TCP connection that a job uses, one port from this range is assigned. | ||
Microsoft Windows server performing the role of a backup repository | TCP | 1025 to 5000 49152-65535 | Dynamic RPC port range. For more information, see https://support.microsoft.com/kb/929851/en-us. | |
TCP | 2500 to 5000 | Default range of ports used as data transmission channels. For every TCP connection that a job uses, one port from this range is assigned. | ||
Shared folder CIFS (SMB) share | TCP | 135, 137 to 139, 445 | Ports used as a transmission channel from the Veeam Agent computer to the target CIFS (SMB) share. | |
Gateway Microsoft Windows server | TCP | 135, 137 to 139, 445 | If a CIFS (SMB) share is used as a backup repository and a Microsoft Windows server is selected as a gateway server for this CIFS share, these ports must be opened on the gateway Microsoft Windows server. | |
TCP | 1025 to 5000 49152-65535 | Dynamic RPC port range. For more information, see https://support.microsoft.com/kb/929851/en-us. | ||
TCP | 2500 to 5000 | Default range of ports used as data transmission channels. For every TCP connection that a job uses, one port from this range is assigned. | ||
Communication with Veeam Cloud Connect Repositories | ||||
Veeam Agent Computer | Cloud gateway | TCP | 6180 | Port on the cloud gateway used to transport Veeam Agent data to the Veeam Cloud Connect repository. |
Certificate Revocation Lists | TCP | 80 or 443 (most popular) | Veeam Agent computer needs access to CRLs (Certificate Revocation Lists) of the CA (Certification Authority) who issued a certificate to the Veeam Cloud Connect service provider. Generally, information about CRL locations can be found on the CA website. | |
|
The list of ports required for computers booted from the Veeam Recovery Media is the same as the list of ports required for Veeam Agent computers. |
