The following table lists network ports that must be opened to manage inbound/outbound traffic.
Veeam Backup Server / Standalone Console
Microsoft Active Directory VM Guest OS
Manages communication between the domain controller and Veeam backup server.
Utilized for LDAP connections.
636, 3268, 3269
49152 to 65535
The dynamic RPC range that is used by the runtime coordination process which is deployed on a VM guest OS for application-aware image processing (when working over the network, not over VIX API).
For more information, see this Microsoft article.