This is an archive version of the document. To get the most up-to-date information, see the current version.Used Ports
Make sure that you open ports listed below to enable proper work of Veeam Agent for Microsoft Windows operating in the standalone mode.
To learn about ports required to enable proper work of Veeam Agent for Microsoft Windows managed by Veeam Backup & Replication, see the Used Ports section in the Veeam Agent Management Guide.
From | To | Protocol | Port | Notes |
|---|---|---|---|---|
Veeam Agent Computer | Veeam Backup Server | TCP | 10001 | Default port used by Veeam Agent for Microsoft Windows operating in the standalone mode for communication with the Veeam Backup server. Data between the Veeam Agent computer and backup repositories is transferred directly, bypassing Veeam backup servers. |
Veeam Agent Computer | TCP | 9395+, | Ports used locally on the Veeam Agent computer for communication between Veeam Agent components and Veeam Agent for Microsoft Windows Service. If the default port number is already in use, Veeam Agent for Microsoft Windows Service will try to use the next port number. | |
Veeam Update Notification Server (autolk.veeam.com) | TCP | 443 | Default port used to download information about available updates from the Veeam Update Notification Server over the Internet. | |
Communication with Veeam Backup & Replication Repositories | ||||
Veeam Agent Computer | Linux server performing the role of a backup repository | TCP | 22 | Port used as a control channel from the Veeam Agent computer to the target Linux host. |
TCP | 2500 to 3300 | Default range of ports used as data transmission channels. For every TCP connection that a job uses, one port from this range is assigned. | ||
Microsoft Windows server performing the role of a backup repository | TCP | 49152-65535 | Dynamic RPC port range. For more information, see this Microsoft article. | |
TCP | 2500 to 3300 | Default range of ports used as data transmission channels. For every TCP connection that a job uses, one port from this range is assigned. | ||
Shared folder CIFS (SMB) share | TCP | 137 to 139, | Ports used as a transmission channel from the Veeam Agent computer to the target CIFS (SMB) share. Ports 137 to 139 are used by backup infrastructure components to communicate using NetBIOS. Port 443 is used to connect the target CIFS (SMB) share over QUIC. For more information, see this Microsoft article. | |
Gateway Microsoft Windows server | TCP | 137 to 139, | If a CIFS (SMB) share is used as a backup repository and a Microsoft Windows server is selected as a gateway server for this CIFS share, these ports must be opened on the gateway Microsoft Windows server. Ports 137 to 139 are used by backup infrastructure components to communicate using NetBIOS. | |
TCP | 49152-65535 | Dynamic RPC port range. For more information, see this Microsoft article. | ||
TCP | 2500 to 3300 | Default range of ports used as data transmission channels. For every TCP connection that a job uses, one port from this range is assigned. | ||
Communication with Veeam Cloud Connect Repositories | ||||
Veeam Agent Computer | Cloud gateway | TCP | 6180 | Port on the cloud gateway used to transport Veeam Agent data to the Veeam Cloud Connect repository. |
Certificate Revocation Lists | TCP | 80 or 443 (most popular) | Veeam Agent computer needs access to CRLs (Certificate Revocation Lists) of the CA (Certification Authority) who issued a certificate to the Veeam Cloud Connect service provider. Generally, information about CRL locations can be found on the CA website. | |
|
The list of ports required for computers booted from the Veeam Recovery Media is the same as the list of ports required for Veeam Agent computers. For information about booting from Veeam Recovery Media, see Restoring from Veeam Recovery Media. |
