The following diagram and table describe ports that must be open to ensure that Veeam Availability Console components and machines interacting with these components can exchange data.
From | To | Protocol | Port | Description |
Veeam Availability Console Web UI | Veeam Availability Console Server | TCP, UDP | 1989 | Default port that the Veeam Availability Console Web UI component uses to communicate with the Server component. |
Management agent | Cloud gateway | TCP, UDP | 6180 | Default port on a cloud gateway used to transfer traffic from management agents, deployed in a client infrastructure, to cloud gateways. |
Cloud gateway | Veeam Cloud Connect server | TCP | 2500-5000 | Port range used during transfer of the management agent from the Veeam Cloud Connect server to a tenant’s backup server. The management agent transfer is performed when a Veeam Backup & Replication server is connected to Veeam Availability Console. |
Cloud gateway | Veeam Availability Console Server | TCP, UDP | 9999 | Default port used to transfer traffic from cloud gateways and Veeam Cloud Connect server to Veeam Availability Console Server component. |
Veeam Cloud Connect server | ||||
Web browser | Veeam Availability Console Web UI | TCP, UDP | 1280 | Default port used to transfer traffic between Veeam Availability Console Web UI component and a web browser. |
Client application | Veeam Availability Console Web UI | TCP, UDP | 1281 | Default port used to exchange RESTful API requests and responses between Veeam Availability Console Web UI component and a client application. |
Veeam Availability Console Server | Veeam License Update Server | TCP | 443 | Default port used to update a license and send license usage statistics to the Veeam License Update Server. Port 443 must be open on the Veeam Availability Console Server to allow incoming and outgoing traffic. |
Master management agent | Veeam Installation Server | TCP | 443 | Default port used to download Veeam Availability Console setup file from the Veeam Installation Server. Port 443 must be open on the machine that runs the master management agent. |
Veeam Backup Agent computer | TCP | 445 | Port required for remote network discovery of computers in the client infrastructure. | |
TCP, UDP | 135, 1025 to 5000 (for Microsoft Windows 2003), 49152-65535 (for Microsoft Windows 2008 and newer) | Ports required for Remote Scheduled Tasks Management (RPC). For details, see https://support.microsoft.com/kb/929851/en-us. | ||
Remote Access Console (SP LAN) | Veeam Cloud Connect server | TCP | 8191 | Port used for communication with the Veeam Cloud Connect Service and Veeam Cloud Connect-side network redirector(s). |
TCP | 9392 | Port used for communication with the Veeam Backup Service. | ||
TCP | 10003 | Port used for communication with the Veeam Backup Service. | ||
Remote Access Console (Internet) | Cloud gateway | TCP | 6180 | Default port used for communication with the Veeam Cloud Connect Service and Veeam Cloud Connect-side network redirector(s). |
Certificate Revocation Lists | TCP | 80 or 443 (most popular) | Remote Access Console needs access to CRLs (Certificate Revocation Lists) of the CA (Certification Authority) who issued a certificate to the Veeam Cloud Connect provider. Generally, information about CRL locations can be found on the CA website. |
