Ports
The main ports required to create backups of Microsoft Entra ID tenants are listed in the following table.
From | To | Protocol | Port | Notes |
|---|---|---|---|---|
Veeam Backup & Replication console | Backup server | TCP | 9419 | Default port for communication with REST API service. |
Backup server | TCP | 9392 | Ports used by the Veeam Backup & Replication console to communicate with the backup server. Note that both ports are required. | |
Management client PC (remote access) | Backup server | TCP | 3389 | Default port used by Remote Desktop Services. If you use third-party solutions to connect to the backup server, other ports may need to be open. |
Backup server | PostgreSQL server hosting the database for the Microsoft Entra ID backup repository | TCP | 5432 | Port used for communication with PostgreSQL server on which the database for Microsoft Entra ID backup repository is located. Note: This port is required if the database is located on a remote PostgreSQL server. |
Microsoft Entra ID Services | TCP | 443 | Default management and data transport port required for communication with Microsoft Azure. | |
Azure Resource Manager | TCP | 443 |
Tip |
To allow inbound access to an Azure service, you can use the IP address, DNS name or virtual network service tag of the service. If you want to use an IP address, you can download a .JSON file with the full list of Azure IP ranges and service tags from the Microsoft Download Center. |
As Veeam Backup for Microsoft Entra ID is installed on the same machine where Veeam Backup & Replication runs, it also uses the same ports as those described in the Ports section in the Veeam Backup & Replication User Guide.
