The following table lists network ports that must be opened to manage inbound/outbound traffic.
Veeam Backup Server / Standalone Console
Microsoft Active Directory VM Guest OS
Manages communication between the domain controller and Veeam backup server.
Utilized for LDAP connections.
636, 3268, 3269
1025 to 5000 (for Microsoft Windows 2003)
49152 to 65535 (for Microsoft Windows 2008 and newer)
The dynamic RPC range that is used by the runtime coordination process which is deployed on a VM guest OS for application-aware image processing (when working over the network, not over VIX API).
For more information, see this Microsoft article.