Ports
The main ports required to create backups of Microsoft Entra ID tenants are listed in the following table.
From | To | Protocol | Port | Notes |
|---|---|---|---|---|
Veeam Backup & Replication console | Backup server | TCP | 9419 | Default port for communication with REST API service. |
Backup server | TCP | 443 | Port used by the Veeam Backup & Replication console to communicate with the backup server. | |
Backup server | PostgreSQL server hosting the database for the Microsoft Entra ID backup repository | TCP | 5432 | Default port used for communication with PostgreSQL server on which the database for Microsoft Entra ID backup repository is located. Note: This port is required if the database is located on a remote PostgreSQL server. Port number may differ if you configure a custom PostgreSQL server instance as Microsoft Entra ID backup repository. |
Proxy server | TCP | 3128 | Port used by Veeam Backup & Replication to redirect traffic to Microsoft Azure services through a proxy server. Note: This port is required if you configure a proxy server as described in Veeam Backup & Replication User Guide, section Configuring HTTP/HTTPS Proxies. | |
Microsoft Entra ID Services | TCP | 443 | Management and data transport port required for communication with Microsoft Azure. Note: To access the necessary Azure service, you can use the IP address, DNS name or virtual network service tag of the service. If you want to use an IP address, you can download a .JSON file with the full list of Azure IP ranges and service tags from the Microsoft Download Center. | |
Azure Resource Manager | TCP | 443 | ||
[Optional] Proxy server | Microsoft Entra ID Services | TCP | 443 | Management and data transport port required for communication with Microsoft Azure though a proxy server. Note: To access the necessary Azure service, you can use the IP address, DNS name or virtual network service tag of the service. If you want to use an IP address, you can download a .JSON file with the full list of Azure IP ranges and service tags from the Microsoft Download Center. |
Azure Resource Manager | TCP | 443 |
Important |
As Veeam Backup for Microsoft Entra ID is installed on the same machine where Veeam Backup & Replication runs, it also uses the same ports. To be able to use the log backup, log backup copy and tenant backup copy features, you must configure the ports listed in the Cache Repositories and Backup Repositories sections of the Veeam Backup & Replication User Guide. |