Ports

The following table lists typical connection settings required for Orchestrator components.

Note

These requirements assume that the embedded Veeam Backup & Replication and Veeam ONE components are used only in the default configuration (to support Orchestrator activities), and not for full production functionality.

If the embedded Orchestrator components are used for additional functionality, refer to the Veeam Backup & Replication User Guide, section Used Ports and Veeam ONE Deployment Guide, section Ports for the full requirements.

 

From

To

Protocol

Port

Notes

Orchestrator server

vCenter Server

HTTPS
TCP

443

Used by the embedded Veeam Backup & Replication and Veeam ONE servers to connect to the vCenter Server.

SVM (NetApp)

HTTPS

443

Used by the Veeam Orchestrator Server Service to access the management interface of the storage virtual machine.

Storage system (HPE)

HTTPS

443

Used by the Veeam Orchestrator Server Service to connect to the HPE Primera storage system.

HTTPS

8080

Used by the Veeam Orchestrator Server Service to connect to the HPE 3PAR storage system.

Microsoft SQL Server

TCP

1433

Required to provide access to the Microsoft SQL Server where Orchestrator, embedded Veeam Backup & Replication and ONE databases are stored.

Additional ports may need to be open depending on your configuration. For more information, see Microsoft Docs.

Veeam Backup & Replication server

Orchestrator server

HTTPS

8888

Required to deploy Orchestrator agents to standalone Veeam Backup & Replication servers. Then, is used by the Veeam Orchestrator Server Service to connect to the Orchestrator agents running on these servers.

VM guest OS

TCP

Ports for VM guest OS connection

Required to run in-guest scripts on a virtual machine being tested, failed over or restored.

For the full list of ports that must be opened to ensure proper communication of the Veeam Backup & Replication server with the runtime coordination process deployed inside the VM guest OS, see the Veeam Backup & Replication User Guide, section Used Ports.

Make sure that the VM is configured to allow inbound traffic: the default File and Printer Sharing (SMB-In) firewall rule must be enabled.

Workstation web browser

Orchestrator UI

HTTP

9898

Required to access the Orchestrator UI from a user workstation.

Veeam ONE Reporter Web UI

HTTP

1239

Required to access the Veeam ONE Reporter console from a user workstation.

The Veeam ONE Reporter Web UI is deprecated in Orchestrator but included for compatibility reasons.

Orchestrator UI

Orchestrator server

TCP

12348

Used by the Orchestrator UI to connect to the remote Veeam Orchestrator Server Service.

Veeam ONE Client

Orchestrator server

TCP

139; 445

Used by Veeam ONE Client to communicate with the embedded Veeam ONE server.

Veeam Backup Catalog service

Veeam Backup & Replication server

TCP

9393

Required to collect indexing data for backup and replication jobs, and to store this data in the Veeam Backup Catalog folder on the Veeam Backup & Replication server.

Veeam Backup & Replication console

Veeam Backup & Replication server

TCP

9392

Used by the Veeam Backup & Replication console to connect to the Veeam Backup & Replication server.

Veeam backup source connection

Veeam Backup & Replication server

TCP

9401

Used by the mount server to communicate with the Veeam Backup & Replication server.