Ports

The following tables list network ports that must be opened to manage inbound and outbound traffic.

Backup

From	To	Protocol	Port	Notes
Backup server, guest interaction proxy (Enterprise and Enterprise Plus editions)	Source Windows machine with Microsoft Exchange	TCP, UDP	135, 137 to 139, 445	Ports used to deploy the runtime coordination process on the source machine.
TCP	6005 to 65535	The dynamic RPC range that is used by the runtime coordination process which is deployed on the source machine for application-aware processing (when working over the network). Note: Microsoft Exchange (in particular, Client Access) expands standard Windows dynamic RPC port range to provide better scalability. For more information, see this Microsoft article.
Source Windows machine with Microsoft Exchange	Backup server, guest interaction proxy (Enterprise and Enterprise Plus editions)	TCP	6005 to 65535	The dynamic RPC range that is used by the runtime coordination process which is deployed on the source machine for application-aware processing (when working over the network). Note: Microsoft Exchange (in particular, Client Access) expands standard Windows dynamic RPC port range to provide better scalability. For more information, see this Microsoft article.

From

Protocol

Port

Notes

Backup server, guest interaction proxy (Enterprise and Enterprise Plus editions)

Source Windows machine with Microsoft Exchange

TCP, UDP

135, 137 to 139, 445

Ports used to deploy the runtime coordination process on the source machine.

TCP

6005 to 65535

The dynamic RPC range that is used by the runtime coordination process which is deployed on the source machine for application-aware processing (when working over the network).

Note: Microsoft Exchange (in particular, Client Access) expands standard Windows dynamic RPC port range to provide better scalability. For more information, see this Microsoft article.

Source Windows machine with Microsoft Exchange

Backup server, guest interaction proxy (Enterprise and Enterprise Plus editions)

TCP

6005 to 65535

The dynamic RPC range that is used by the runtime coordination process which is deployed on the source machine for application-aware processing (when working over the network).

Note: Microsoft Exchange (in particular, Client Access) expands standard Windows dynamic RPC port range to provide better scalability. For more information, see this Microsoft article.

Note

Configuring dynamic RPC range is not required when using default Microsoft Windows firewall settings as Veeam Backup & Replication automatically creates an associated firewall rule for the runtime process during installation. When using custom firewall settings or if application-aware processing fails with the RPC function call failed error, make sure to configure dynamic RPC ports manually. For more information, see this Microsoft article.

Restore

From	To	Protocol	Port	Notes
Backup server, Veeam Backup & Replication console	Target Microsoft Exchange 2013/2016/2019 CAS server	TCP	443	Port used for Microsoft Exchange web services connections.