Ports
The following table lists typical connection settings required for Orchestrator components.
Note |
These requirements assume that the embedded Veeam Backup & Replication and Veeam ONE components are used only in the default configuration (to support Orchestrator activities), and not for full production functionality. If the embedded Orchestrator components are used for additional functionality, see the Veeam Backup & Replication User Guide, section Ports and Veeam ONE Deployment Guide, section Ports for the full requirements. |
From | To | Protocol | Port | Notes |
|---|---|---|---|---|
Orchestrator server | vCenter Server | TCP/HTTPS | 443 | Used by the embedded Veeam Backup & Replication and Veeam ONE servers to connect to the vCenter Server. |
SVM (NetApp) | HTTPS | 443 | Used by the Veeam Orchestrator Server Service to access the management interface of the storage virtual machine. | |
Storage system (HPE) | HTTPS | 443 | Used by the Veeam Orchestrator Server Service to connect to the HPE Primera storage system. | |
HTTPS | 8080 | Used by the Veeam Orchestrator Server Service to connect to the HPE 3PAR storage system. | ||
Microsoft SQL Server | TCP | 1433 | Required to provide access to the Microsoft SQL Server where Orchestrator, embedded Veeam Backup & Replication and ONE databases are stored. Additional ports may need to be open depending on your configuration. For more information, see Microsoft Docs. | |
Veeam Backup & Replication server | TCP | 135; 445 | Required to deploy Orchestrator agents to remote Veeam Backup & Replication servers. | |
Veeam Backup & Replication server | Orchestrator server | HTTPS | 8888 | Required to deploy Orchestrator agents to remote Veeam Backup & Replication servers. Then, this port is used by the Veeam Orchestrator Server Service to connect to the Orchestrator agents running on these servers. |
vSphere VM guest OS | TCP | Ports for VM guest OS connection | Required to run in-guest scripts on a virtual machine being tested, failed over or restored. For the full list of ports that must be opened to ensure proper communication of the Veeam Backup & Replication server with the runtime coordination process deployed inside the VM guest OS, see the Veeam Backup & Replication User Guide, section Ports. Make sure that the VM is configured to allow inbound traffic: the default File and Printer Sharing (SMB-In) firewall rule must be enabled. | |
Workstation web browser | Veeam ONE Reporter Web UI | HTTPS | 1239 | Required to access the Veeam ONE Reporter console from a user workstation. |
Orchestrator UI | Orchestrator server | TCP | 12348 | Used by the Orchestrator UI to connect to the remote Veeam Orchestrator Server Service. |
Veeam ONE Client | Orchestrator server | TCP | 139; 445 | Used by Veeam ONE Client to communicate with the embedded Veeam ONE server. |
Veeam Backup Catalog service | Veeam Backup & Replication server | TCP | 9393 | Required to collect indexing data for backup and replication jobs, and to store this data in the Veeam Backup Catalog folder on the Veeam Backup & Replication server. |
Veeam Backup & Replication console | Veeam Backup & Replication server | TCP | 9392 | Used by the Veeam Backup & Replication console to connect to the Veeam Backup & Replication server. |
Veeam backup source connection | Veeam Backup & Replication server | TCP | 9401 | Used by the mount server to communicate with the Veeam Backup & Replication server. |
Veeam License Update Server | Orchestrator server | TCP | 443 | Required to get automatic license updates. |