Help Center
Choose product document...
Veeam Backup & Replication 9.5
Enterprise Manager User Guide

Used Ports

This section covers typical connection settings for the Veeam Backup Enterprise Manager. Ports specific for Veeam Backup & Replication infrastructure components are described in the Veeam Backup & Replication User Guide.

In This Section

General

The following ports must be opened for Enterprise Manager operation and components interactions:

From

To

Protocol

Port

Notes

Veeam Backup Enterprise Manager

Veeam backup server

TCP

9392

Default port used by Veeam Backup Enterprise Manager for collecting data from Veeam backup servers. Can be customized during Veeam Backup & Replication installation

9393

Default port used by the Veeam Guest Catalog service for catalog replication. Can be customized during Veeam Backup & Replication installation.

2500 to 2600

Ports used by the Veeam Guest Catalog service for replicating catalog data.

135

Default RPC port.

49152 - 65535 (for Microsoft Windows 2008 and later)

1025 to 5000 (for Microsoft Windows 2003)

Dynamic RPC port range. For more information, see  https://support.microsoft.com/en-us/kb/832017#method1 and http://support.microsoft.com/kb/929851/en-us.

SQL Server hosting the Enterprise Manager configuration database

TCP

1433

Port used for communication with Microsoft SQL Server hosting Enterprise Manager database - if database is deployed using default SQL server instance settings (see Step 6. Use Default Configuration below).

Additional ports access may be needed depending on your configuration - for more information, see https://msdn.microsoft.com/en-us/library/cc646023(v=sql.120).aspx#BKMK_ssde.

vCenter Server

TCP

443

Default port used for connection to vCenter Server and deploying Veeam plug-in for vSphere web client. Can be customized in Enterprise Manager.

Active Directory

TCP

49152 - 65535 (for Microsoft Windows 2008 and later)

1025 to 5000 (for Microsoft Windows 2003)

Ports used by Enterprise Manager service to communicate to Active Directory; also used when performing Self-Service Restore. This is a default dynamic port range; for details, see http://support.microsoft.com/kb/832017/en-us#method1.

Microsoft Search Server (optional)

TCP

9395

Default port used by the optional Veeam Backup Search service integration component (usually intended for backward compatibility). Can be customized during Veeam Backup Search installation.

Veeam Backup Enterprise Manager
web site (IIS extension)

Veeam Backup Enterprise Manager service

TCP

9394

Default port used by IIS extension to communicate with Enterprise Manager. Can be customized during Enterprise Manager installation.

Veeam Cloud Connect Portal
web site (IIS extension)

Veeam Backup Enterprise Manager service

TCP

9397

Default port used by IIS extension to communicate with Enterprise Manager. Built-in value, cannot be customized during installation.

Browser

Veeam Backup Enterprise Manager web site (IIS extension)

HTTP

9080

Default ports used to communicate with the website. Can be customized during Enterprise Manager installation.

HTTPS

9443

Veeam Cloud Connect Portal web site (IIS extension)

HTTPS

6443

Default ports used to communicate with the website. Can be customized during Enterprise Manager installation.

Veeam Backup Enterprise Manager RESTful API client
and/or
VMware vSphere web client
plug-in

Veeam Backup Enterprise Manager Restful API

HTTP

9399

Default ports used to communicate with Veeam Backup Enterprise Manager Restful API. Can be customized during Enterprise Manager installation.

HTTPS

9398

Veeam ONE Server
(optionally - if you are using Veeam Availability Suite)

Veeam Backup Enterprise Manager

TCP

Dynamically assigned ports

If you are using Veeam Availability Suite and add Veeam Backup Enterprise Manager server to Veeam ONE scope, consider ports required to gather data through WMI. To learn about enabling and disabling WMI traffic, see http://msdn.microsoft.com/en-us/library/aa389286(v=vs.85).aspx and http://msdn.microsoft.com/en-us/library/aa822854(v=vs.85).aspx.

Enterprise Manager network connectivity diagram can be found here. During installation, Veeam Backup & Replication automatically creates firewall rules for default ports to allow communication for the application components.

Ports for Restore Operations

Guest OS File Restore (Windows)

From

To

Protocol

Port

Notes

Veeam Backup Enterprise Manager

Veeam backup server

TCP

2500 - 6000

Ports used for file download.

Guest OS File Restore (Linux)

From

To

Protocol

Port

Notes

Veeam Backup Enterprise Manager

Linux helper appliance

TCP

2500 - 6000

Ports used for file download. See Preparing for Linux Guest Files Search and Restore for information about helper appliance.

For the list of ports used by the mount server associated with backup repository at file-level restore, please refer to this section of the Veeam Backup & Replication User Guide: https://helpcenter.veeam.com/docs/backup/vsphere/used_ports.html?ver=95#mount.

For the list of ports used by the components involved in 1-Click VM restore to the original location, please refer to the corresponding tables in this section of the Veeam Backup & Replication User Guide.

SQL Server Database Restore

From

To

Protocol

Port

Notes

Target remote SQL Server to which application items are restored

Mount server associated with backup repository

TCP

3260 - 3270

Ports are open for iSCSI traffic during SQL databases restore to the original SQL server. These ports are used during the restore process only.

Oracle Database Restore

The following ports are open on Windows machines in case of 1-click database restore to the original Oracle server VM (remote machine).

From

To

Protocol

Port

Notes

Target remote VM to which application items are restored

Machine running mount service*

TCP

3260 - 3270

Range of ports opened by Veeam for iSCSI traffic. Ports are open only during application item restore session. See also Scenario 1: 1-Click Restore to Original Location.

The following table describes network ports open during database restore with custom settings.

From

To

Protocol

Port

Notes

Machine running mount service*

Oracle on Windows server

TCP

49152-65535 

Recommended dynamic RPC port range for Microsoft Windows 2008 and later. For more information, refer to https://support.microsoft.com/en-us/kb/832017.

TCP

1025 - 1034

Default port range for the runtime component installed on VM guest to support restore operations in most scenarios. Port is open only during application item restore.

Oracle on Linux server

TCP

22

Default SSH port used as a control channel.

TCP

2500 - 5000

Default port range for data transmission.

* - the mount server associated with the repository (if restoring from backup), or Veeam backup server (if restoring from replica)

 

Veeam Large Logo

User Guide for VMware vSphere

User Guide for Microsoft Hyper-V

Enterprise Manager User Guide

Veeam Cloud Connect Guide

Veeam Backup Explorers User Guide

Backup and Restore of SQL Server Databases

PowerShell Reference

RESTful API Reference

Veeam Backup FREE Edition User Guide

Veeam Backup for Microsoft Office 365

Veeam ONE Documentation

Veeam Agent for Windows Documentation

Veeam Agent for Linux Documentation

Veeam Management Pack Documentation