This is an archive version of the document. To get the most up-to-date information, see the current version.

Used Ports

In this article

    The following network ports must be open to ensure proper communication of components in the backup infrastructure of Veeam Backup for Microsoft Azure.

    From

    To

    Protocol

    Port

    Description

    Web browser

    (local machine)

    Controller server

    HTTPS

    443

    Required for communications between the web browser and the Veeam Backup for Microsoft Azure UI of the controller server.

    Worker instance

    HTTPS

    443

    Port used for communication with the Veeam Backup browser on the worker instance during the file-level restore process.

    Controller server

    Worker instance

    SSH

    22

    Required to deploy the Worker service to workers.

    RPC

    643

    Required for communication with the Worker service.

    TCP

    9999

    Required to perform file-level recovery.

    Ubuntu Security Update repository (security.ubuntu.com)

    HTTP

    80

    Required to get OS security updates.

    Veeam Update Notification Server (repository.veeam.com)

    HTTPS

    443

    Required to download information about available product updates.

    SMTP server

    TCP

    25

    Default port used for sending email notifications.

    Note: The TCP 25 port is the port that is the most commonly used by SMTP servers.

    The backup server and worker instances must have outbound network access to the following Microsoft Azure services:

     Azure Active Directory

     Azure Resource Manager

     Azure Storage Accounts

     Azure Cost Management

     Microsoft Identity Platform

     Azure’s Ubuntu repository

    Microsoft uses a service tag to represent a group of IP address prefixes from a given Azure service. You can use service tags to define network access controls on Azure Firewall, for more information see Microsoft Docs.