Ports
The main ports required to create backups of Microsoft Entra ID tenants are listed in the following table.
From | To | Protocol | Port | Notes |
|---|---|---|---|---|
Veeam Backup & Replication console | Backup server | TCP | 9419 | Default port for communication with REST API service. |
Backup server | TCP | 9392 | Ports used by the Veeam Backup & Replication console to communicate with the backup server. Note that both ports are required. | |
Backup server | PostgreSQL server hosting the database for the Microsoft Entra ID backup repository | TCP | 5432 | Default port used for communication with PostgreSQL server on which the database for Microsoft Entra ID backup repository is located. Note: This port is required if the database is located on a remote PostgreSQL server. Port number may differ if you configure a custom PostgreSQL server instance as Microsoft Entra ID backup repository. |
Microsoft Entra ID Services | TCP | 443 | Management and data transport port required for communication with Microsoft Azure. Note: To access the necessary Azure service, you can use the IP address, DNS name or virtual network service tag of the service. If you want to use an IP address, you can download a .JSON file with the full list of Azure IP ranges and service tags from the Microsoft Download Center. | |
Azure Resource Manager | TCP | 443 |
As Veeam Backup for Microsoft Entra ID is installed on the same machine where Veeam Backup & Replication runs, it also uses the same ports as those described in the Ports section in the Veeam Backup & Replication User Guide.