Used Ports
The following network ports must be open to ensure proper communication of components in the backup infrastructure of Veeam Backup for Microsoft Azure.
From | To | Protocol | Port | Description |
---|---|---|---|---|
Web browser (local machine) | Controller server | HTTPS | 443 | Required for communications between the web browser and the Veeam Backup for Microsoft Azure UI of the controller server. |
Worker instance | HTTPS | 443 | Port used for communication with the Veeam Backup browser on the worker instance during the file-level restore process. | |
Controller server | Worker instance | SSH | 22 | Required to deploy the Worker service to workers. |
RPC | 643 | Required for communication with the Worker service. | ||
TCP | 9999 | Required to perform file-level recovery. | ||
Ubuntu Security Update repository (security.ubuntu.com) | HTTP | 80 | Required to get OS security updates. | |
Veeam Update Notification Server (repository.veeam.com) | HTTPS | 443 | Required to download information about available product updates. | |
SMTP server | TCP | 25 | Default port used for sending email notifications. Note: The TCP 25 port is the port that is the most commonly used by SMTP servers. |
The backup server and worker instances must have outbound network access to the following Microsoft Azure services:
Microsoft uses a service tag to represent a group of IP address prefixes from a given Azure service. You can use service tags to define network access controls on Azure Firewall, for more information see Microsoft Docs.