Ports
The main ports required to create backups of Microsoft Entra ID tenants are listed in the following table.
From | To | Protocol | Port | Notes |
|---|---|---|---|---|
Veeam Backup & Replication console | Backup server | TCP | 9419 | Default port for communication with REST API service. |
Backup server | TCP | 9392 | Ports used by the Veeam Backup & Replication console to communicate with the backup server. Note that both ports are required. | |
Management client PC (remote access) | Backup server | TCP | 3389 | Default port used by Remote Desktop Services. If you use third-party solutions to connect to the backup server, other ports may need to be open. |
Backup server | PostgreSQL server hosting the database for the Microsoft Entra ID backup repository | TCP | 5432 | Port used for communication with PostgreSQL server on which the database for Microsoft Entra ID backup repository is located. Note: This port is required if the database is located on a remote PostgreSQL server. |
Microsoft Azure | TCP | 443 | Default management and data transport port required for communication with Microsoft Azure. |
As Veeam Backup for Microsoft Entra ID is installed on the same machine where Veeam Backup & Replication runs, it also uses the same ports as those described in the Ports section in the Veeam Backup & Replication User Guide.