Used Ports

The following tables list network ports that must be opened to manage inbound/outbound traffic.

Backup

From

To

Protocol

Port

Notes

Veeam Backup Server / Guest Interaction Proxy (Enterprise and Enterprise Plus editions)

Exchange Server VM Guest OS

TCP, UDP

135, 137 to 139, 445

Ports used to deploy the runtime coordination process on a VM guest OS.

TCP

6005 to 65535

The dynamic RPC range that is used by the runtime coordination process which is deployed on a VM guest OS for application-aware processing (when working over the network).

Note that Exchange 2010 or higher (in particular, Client Access) expands standard Windows dynamic RPC port range to provide a better scalability.

For more information, see this Microsoft article.

Exchange Server VM Guest OS

Veeam Backup Server / Guest Interaction Proxy (Enterprise and Enterprise Plus editions)

TCP

6005 to 65535

The dynamic RPC range that is used by the runtime coordination process which is deployed on a VM guest OS for application-aware processing (when working over the network).

Note that Exchange 2010 or higher (in particular, Client Access) expands standard Windows dynamic RPC port range to provide a better scalability.

For more information, see this Microsoft article.

 

Used Ports Note

Configuring dynamic RPC range is not required when using default Microsoft Windows firewall settings as Veeam Backup & Replication automatically creates an associated firewall rule for the runtime process during installation. When using custom firewall settings or if application-aware processing fails with the RPC function call failed error, make sure to configure dynamic RPC ports manually. For more information, see this Microsoft article.

Restore

From

To

Protocol

Port

Notes

Veeam Backup Server / Standalone Console

Microsoft Exchange CAS Server

TCP

443

Port used for Microsoft Exchange web services connections.