Ports
The main ports required to create backups of Microsoft Entra ID tenants are listed in the following table.
From | To | Protocol | Port | Notes |
|---|---|---|---|---|
Veeam Backup & Replication console | Backup server | TCP | 9419 | — |
Backup server | TCP | 443 | — | |
Backup server | [Optional] PostgreSQL server hosting the database for the Microsoft Entra ID backup repository | TCP | 5432 | This port is required if the database is located on a remote PostgreSQL server. Port number may differ if you configure a custom PostgreSQL server instance as Microsoft Entra ID backup repository. |
[Optional] HTTP proxy server | TCP | HTTP proxy server port | This port is required if you configure a proxy server as described in Veeam Backup & Replication User Guide, section Configuring HTTP/HTTPS Proxies. | |
Microsoft Entra ID Services | TCP | 443 | To access the necessary Azure service, you can use the IP address, DNS name or virtual network service tag of the service. If you want to use an IP address, you can download a .JSON file with the full list of Azure IP ranges and service tags from the Microsoft Download Center. | |
Azure Resource Manager | TCP | 443 | ||
[Optional] HTTP proxy server | Microsoft Entra ID Services | TCP | 443 | |
Azure Resource Manager | TCP | 443 | ||
[Optional] Cache repository | Gateway server | TCP
| 2500 to 3300
| Cache repository is required to use the log backup and log backup copy features. |
Primary or secondary backup repository | ||||
[Optional] Backup server | Cache repository | TCP | 6160, 6162 | |
Old cache repository, new cache repository | TCP | 2500 to 3300 |
Important |
|