The following network ports must be open to ensure proper communication of components in the backup infrastructure of Veeam Backup for Microsoft Azure.
Required for communications between the web browser and the Veeam Backup for Microsoft Azure UI of the controller server.
Port used for communication with the Veeam Backup browser on the worker instance during the file-level restore process.
Required to deploy the Worker service to workers.
Required for communication with the Worker service.
Required to perform file-level recovery.
Ubuntu Security Update repository (security.ubuntu.com)
Required to get OS security updates.
Veeam Update Notification Server (repository.veeam.com)
Required to download information about available product updates.
Default port used for sending email notifications.
Note: The TCP 25 port is the port that is the most commonly used by SMTP servers.
The backup server and worker instances must have outbound internet access to the following Microsoft Azure services:
Microsoft uses a service tag to represent a group of IP address prefixes from a given Azure service. You can use service tags to define network access controls on Azure Firewall, for more information see Microsoft Docs.