Veeam proxy ports. Communication Between Veeam Backup & Replication.
Veeam proxy ports. The ports must be open on the target machine for Learn how to create and configure a Veeam backup proxy, choose the right transport mode, and optimize performance with this step-by-step guide. Otherwise, Veeam Backup for Microsoft 365 will add a workgroup backup proxy server. Jul 20, 2012 · Port 6162 is used by the Veeam Transport Service which is responsible for managing Veeam agents during backup and replication processes. Veeam Deployer Service (veeamdeployment) - Default Port: 6160 Apr 19, 2022 · This issue occurs when the Veeam Backup server is unable to communicate with the Azure Proxy, which by default communicates over port 443. For more information, see Deployment Scenarios for Windows-based Backup Proxy Servers. There are several physical servers, including SQL Server, which is also a cluster. Do you run Replication VBR server separate in your DR location? This is recommended, if you’re able to do so. These rules allow communication between the components. Jun 9, 2021 · Configure Linux Backup Proxy in Veeam When the Linux OS has been installed in the VM, we need to configure in Veeam the new VM as Backup Proxy. Restore speed doesn't go Oct 13, 2015 · Veeam Community discussions and solutions for: Firewalld ports opened on multiple zones. Oct 17, 2025 · If you use an HTTP/HTTPS proxy server to access the Internet, make sure that WinHTTP settings are properly configured on Microsoft Windows machines with Veeam backup infrastructure components. Please take a look at our User Guide (page 59) for more info on the used networks ports. Interaction. 5). Which ports are needed ? TCP 443 and 902 only ? Thx. 04 repo, vSphere/ESX 7, one proxy VM on each ESX host. Note: Veeam Help Center section covers typical connection settings for the backup infrastructure components Oct 21, 2025 · The following table lists connection settings required for proper communication between Veeam ONE components, virtualization servers, VMware Cloud Director servers, Veeam Backup & Replication servers and Veeam Mar 23, 2015 · Hi I tried to make an Instant VM recovery, but failed because of a firewalldrop. According to the documentation I need from the backup proxy (on the Veeam server in this case) ports TCP 49152-65535 to be open to the server with the large drive being used as a repository. I've configured port forward rules on the firewall, but cannot get the source proxy to see the destination proxy. Hope this helps! Oct 14, 2025 · Short Description Adds a backup proxy server to the Veeam Backup for Microsoft 365 infrastructure. S3 (capacity tier) offloading is working great Now with Veeam V11 I'm trying to use archive tier (to get rid of AWS VTL Storage Gateway), but when configuring the proxy appliance it tells what it'll have a Public IP address. Veeam MP for VMware Sep 4, 2024 · On backup infrastructure components, Veeam Backup & Replication automatically creates firewall rules for the required ports. Our backup infrastructure servers (Management\Proxy\Repository etc. Jun 14, 2023 · Each of our AHV proxies are configured similarly - a proxy with one NIC in the "backup management" subnet/VLAN which has firewall rules permitted to the Veeam infrastructure, and a second NIC on the same subnet/VLAN as the Nutanix cluster (AHV hosts, CVMs, data services/iscsi IP). Configure firewalls for seamless communication. Go to the Administration section. Thanks! Ports List Finder In order to access the Veeam Ports finder tool please navigate to https://www. My que Apr 28, 2021 · Hello, Any news about this feature? My Veeam Server is on AWS with direct access to S3. To interact with the VM guest OS, Veeam Backup & Replication needs either to install Apr 2, 2025 · The following table describes network ports that must be opened to ensure proper communication of the Veeam Cloud Connect infrastructure components. Method: Open the Veeam Backup & Replication Console. Jan 24, 2012 · Hello experts and good day, let’s consider a specific scenario involving a segmented Veeam Infrastructure and a Protection Group for pre-deployed Veeam Agents, when deploying them from the Veeam backup server is not the best solution for various reasons. May 8, 2024 · Hi, I am looking at putting an immutable Linux repository on a separate network/VLAN to limit traffic to it. If you are using a third-party firewall, these rules must Nov 8, 2023 · This is the same mode of operation for Veeam Backup & Replication versions 6, 7, 8 and 9 (including 9. The possible data processing performance numbers (according to the internal testing) for the file backup proxies in different hardware configurations are provided in the table below. Regarding the KB we must use the administrator account as it has the -500 at the end of the SID. For safety purpose we want to disable the global dom Aug 20, 2025 · The following tables list network ports that must be opened to manage inbound and outbound traffic. To configure the VMware backup proxy, you must add a Microsoft Windows or Dec 19, 2024 · The following links lead to tables that list network ports that must be opened to ensure proper communication of components in the Veeam Plug-in management infrastructure. Now regarding the network ports that must be opened, my understanding is that apart from the network ports that must be opened to ensure Jan 24, 2014 · We have a Veeam server and want to connect over a cross connect to a windows server with a large directly connected driver to be used as a repository. Aug 8, 2019 · We have also see that the transport service is now listening on 6160 and 6162. A slow proxy can extend the sync time which needed to check for changes on a Microsoft 365 object during an incremental backup run, sometimes up to several minutes. The Veeam Gateway Server will write the data to the target storage. In the Network transport mode, Veeam backup proxy connects to the ESXi host where the VM resides, and reads the necessary VM configuration files (such as *. To let Veeam Backup & Replication present LUNs of snapshots to the proxy, you must register the proxy with a WWN ID on the storage system. Specify Backup Proxy Server or Backup Proxy Pool Step 5. Backup From To Protocol Port Notes Backup server, guest interaction proxy (Enterprise and Enterprise Plus Jan 20, 2020 · This article documents how to configure WinHTTP for machines hosting Veeam components in environments where the machine does not have direct internet access but a proxy is available. Sep 2, 2024 · The guest interaction proxy is a backup infrastructure component that sits between the backup server and processed VM. Communication Between Veeam Backup & Jun 1, 2023 · Veeam Community discussions and solutions for: Firewall ports between Veeam BR, ESX, Proxies & VCSA of VMware vSphere Aug 15, 2024 · The following table lists network ports that must be opened to manage inbound and outbound traffic. Off-Host backup mode, for which backup data processing is VMware proxy Data processing throughput of the VMware backup proxies depends on the available compute (CPU and RAM) resources. From To Protocol Port Notes Backup server, Veeam Backup & Replication console Microsoft Active Directory May 27, 2025 · This section covers typical Veeam Backup Enterprise Manager connections and default ports required for communication between Enterprise Manager components. Select Microsoft Azure Blob Storage Type and Account Creating or Configuring Microsoft Entra Application Sep 11, 2017 · Are there other connections required? I know the website with all used veeam ports, but on this website I can't see the difference if I use a veeam backup server without a proxy server or, as in my case, with a proxy server to create an mssql application consistent backup. TCP Ports Should be opened for both ingress and egress 135, 137-139, 443, 445, 902, 2500-3300, 6160-6162, 6210 UDP The ports that Veeam requires depend on the specific components you use and how your IT environment is structured. We would like to show you a description here but the site won’t allow us. The possible data processing performance numbers (according to the internal testing) for the VMware backup proxies in different hardware configurations are provided in the table below. Guest. Hi, this post (Veeam B&R: Flow matrix and Transport modes) is focused on Backup Proxies interaction and ports requirements. Open the Backup Infrastructure view, in the inventory pane select the Backup Proxies node, click Add Proxy on the ribbon and select VMware backup proxy. Understand Veeam core components and their communication is very useful especially to improve the security of your architecture (cybersecurity and compliance). However, by default telnet client is not installed during Windows Server and the Vee Nov 7, 2012 · Veeam Community discussions and solutions for: Proxy behind firewall/NAT of Veeam Backup & Replication Mar 6, 2019 · Are there any plans to add a proxy function for the veeam agent backups? We have the same security requirment: we like to protect the repos from direct contact with the servers that they are backing up and isolate them on the network. May 31, 2011 · However each proxy server can see it's local Infrastructure, datastores etc. Oct 31, 2022 · Before enabling the Windows Server firewall on all of my Veeam Backup servers, what are the ports or the rule I must manually add under: May 7, 2025 · SMB (CIFS) Protocol SMB (CIFS) traffic between the proxy and storage system must be allowed. To do this, open Internet Options > Connections > LAN Settings > Proxy server and specify the IP address of the proxy appliance on the isolated network and port number. The software uses TCP ports 2500 to 5000 for file transfers from a VMware vSphere or ESXi hypervisor. If you are using a third-party firewall, these rules must Sep 2, 2024 · The guest interaction proxy is a backup infrastructure component that sits between the backup server and processed VM. Sep 17, 2025 · On backup infrastructure components, Veeam Backup & Replication automatically creates firewall rules for the required ports on Windows-based machines. To interact with the VM guest OS, Veeam Backup & Replication needs either to install Jul 16, 2024 · Checking Permissions for Office 365 Exchange Online API Permissions for Modern Authentication and Legacy Protocols Step 5. But my proxy appliance will be on the same VPC / Same Subnet than my Veeam server Dec 5, 2023 · Purpose By default, during the deployment of Veeam Agent for Linux on a Linux machine by Veeam Backup & Replication, the services listed below use the default ports indicated. Dec 1, 2019 · Veeam Community discussions and solutions for: Required ports between Linux based proxy and MS repository of VMware vSphere Jun 11, 2025 · Requirements Azure VPN / ExpressRoute The procedure documented in this article requires an existing Azure ExpressRoute (with private peering) or VPN Connection (Site-to-Site or Point-to-Site-VPN). For backup proxy servers, these ports are required to access Microsoft 365 organizations and communicate with object storage repositories; for Amazon and Azure archiver appliances — to communicate with object storage repositories. Also, does Veeam have a proxy for end-user traffic? of Veeam Backup & Replication Apr 18, 2024 · Off-Host Backup Proxy Deployment When you assign the role of an off-host backup proxy to the selected machine, Veeam Backup & Replication automatically installs on it light-weight components and services required for backup proxy functioning. Backup From To Protocol Port Notes Backup server, guest interaction proxy (Enterprise and Enterprise Plus Sep 4, 2024 · On backup infrastructure components, Veeam Backup & Replication automatically creates firewall rules for the required ports. My infrastructue looks as following: Veeam Backupserver (Server1) in Networkzone 1 ESX Server with Management network in Networkzone 1 Server (Server2) with the following roles: Veeam Proxy, Repository, vPowerNFS, MountServer in Networkzone 2 I know the website with the required firewall ports and have implemented Jan 5, 2021 · Hi, im trying to filter the traffic beween VeeamB&R server, Nutanix cluster and Veeam AHV Proxy Server. Jun 14, 2022 · Reviewing Results If the Isolation Test successfully contacts Port 22 of the Proxy Appliance, but the Archiving Job still fails, please collect logs and open a support case with Veeam. But i found that "VeeamB&R server" keep start a session with the "AHV Proxy Server" using a source port 10006 and a generic destination ports, there ports are Dec 1, 2022 · The solution for being able to install the proxy and repository services as needed is to tell Datadog to use another port, or tell Veeam too. veeambp. Jan 14, 2014 · Veeam Community discussions and solutions for: VBO365 firewall rules of Veeam Backup for Microsoft 365 Feb 5, 2019 · Guest interaction Proxy has not the same purpose as the Veeam Proxy Service. To learn what ports are required for other Veeam Backup & May 13, 2025 · Before you assign the role of a VMware backup proxy, check the following prerequisites and limitations. Backup From To Protocol Port Notes Backup server, guest interaction proxy (Enterprise and Enterprise Plus Jun 19, 2023 · This section describes typical settings required for connections between all Veeam MP for VMware infrastructure components, and between the Veeam MP for VMware components and vCenter Server. Firewall ports for Veeam Backup Repository 9. connect to admin Dec 27, 2011 · Veeam Community discussions and solutions for: Failed to connect to port (Server:2501) of Veeam Backup & Replication Feb 2, 2017 · Veeam Community discussions and solutions for: Archive to Glacier and using EC2 over private connection of Object Storage as Backup Target May 16, 2024 · To do this, on the VM open Internet Options > Connections > LAN Settings > Proxy server and specify the IP address of the proxy appliance on the isolated network and port number. Depending on the deployment scenario you choose, additional configuration actions may be required. 0 User Guide, i allowed traffic on port 10006 from "AHV Proxy Server" to "VeeamB&R server". We are a MSP. Will be going to ESX 8 soon, if that changes things. For this reason you may need to configure a HTTP/HTTPS Proxy, but the Aug 19, 2011 · Configure Internet Proxy in Windows After a VM has been started using this Virtual Lab, you must adjust the proxy settings to enable internet access. File proxy Data processing throughput of the file (general purpose) backup proxies depends on the available compute (CPU and RAM) resources. Connection to Storage The following list shows possible connections between the machine and storage that Jul 25, 2025 · Veeam Backup for OLVM and RHV automatically creates firewall rules for the ports required to allow communication between the backup appliance, workers and the backup server. Nov 24, 2022 · Hi all,Our setup is currently as follow: Veeam server in seperated VLAN, guest processing is now running with VIX with the domain\\administrator account. Jan 25, 2024 · At the Server step of the wizard, select a server which you want to use as the VMware CDP proxy, specify description and ports that will be used for communication: From the Choose server drop-down list, select May 13, 2025 · To enable proper work of Veeam Plug-ins, make sure that the following ports are open. Apr 25, 2023 · Configure Proxy Settings for a Management Server Proxy should also be enabled for Management Servers, if any Veeam Backup & Replication component is installed there. Hello, we need to create some firewall exception to connect directly 2 esxi hosts to a VB&R server. Feb 6, 2024 · Any kind of proxy or traffic shaping in the connection between Veeam Backup for Microsoft 365 proxies and the Microsoft 365 API servers can significantly impact performance. Nov 17, 2023 · On backup infrastructure components, Veeam Backup & Replication automatically creates firewall rules for the required ports. May 5, 2025 · Communication Between Veeam Agent Components The following table describes network ports that must be opened to enable proper communication between Veeam Agent for Linux components. If you want to add a domain backup proxy server, select the Use domain network check box. Sep 11, 2024 · To launch the New oVirt KVM Backup Appliance wizard, do the following: In the Veeam Backup & Replication console, open the Backup Infrastructure view. I had the impression that only port 6160 TCP was needed to install the service, and possibly to run if afterwards as proxy to proxy communication should all happen over the 6160 port, so nothing else would be needed to allow this Veeam server to Mar 25, 2025 · Veeam Backup & Replication has different components/toles and not necessary each of them has direct access to the Internet. Jul 14, 2014 · Veeam Community discussions and solutions for: Veeam Firewall Ports of Veeam Backup & Replication Nov 22, 2024 · Communication Between Veeam Agent Components The following table describes network ports that must be opened to enable proper communication between Veeam Agent for Microsoft Windows components. This article documents how to change those default ports using registry settings on the Veeam Backup Server. What is the Ports List Finder? The tool brings together all the required ports from all the various Veeam Help Center pages into a single location. Feb 20, 2024 · Are you talking about recovery using Veeam Replication? Ports listed in the Guide cover all Veeam components. At the Server step of the wizard: From the Choose server list, select a server to which you want to assign the VMware Backup Proxy role. The Veeam Proxy is used to read the productive data and send it to the Veeam Backup Repo. May 23, 2016 · Veeam Community discussions and solutions for: Port 2500 no listening service or so it seems of Veeam Agent for Microsoft Windows Jun 3, 2025 · That is where this script was born, and it also creates a group called “Veeam” to put the rules in so when you look in your firewall settings, you can sort by group and find all the Veeam-related rules. You can always just have a look at windows firewall to verify. vmx) using NFC over port 902. Specify Object Storage Service Point and Account Step 8. On-Host backup mode, for which backup data processing is on the Hyper-V node hosting the VM, leveraging non transportable shadow copies by using software VSS provider. To perform Replication Failover in the event of mishap at your DC1 site, you don’t need a Proxy in the DR side for the Failover/Recovery process, as your replica VMs are May 5, 2023 · This article documents how to test connectivity between two machines over a specific port. ) are in an isolated IPv6 network. Feb 10, 2013 · Veeam Community discussions and solutions for: Failed to open management RPC connection of Veeam Backup & Replication Sep 6, 2022 · During troubleshooting a backup environment, it’s common the necessity of test ports responsivity of our backup servers, like Veeam backup server, mount server, proxy or repositories. Jul 6, 2023 · What are the ports and the protocol used by the Veeam backup server v12? I wanted to turn on my firewall, but don't want to cause the backup, replication or restore process to fail. Jan 16, 2015 · Hi, I need to know the exact ports required\used between Backup\Mount servers and target VM (customer subnet) for file-level restore. (veeam port list shows windows should only be listening on 6160. Fibre Channel In the Port field, enter a port number to access the specified computer. You can find the full Nov 28, 2011 · Veeam Community discussions and solutions for: Port requirements clarfication of Veeam Backup & Replication Jan 30, 2025 · A VMware backup proxy is an architecture component that sits between the backup server and other components of the backup infrastructure. Summary This document shows what ports are needed in order to deploy a Veeam Proxy (General or VMware) on a Windows host. Based on Veeam Backup for Nutanix AHV 3. I follow throguh the new Proxy wizard on the source, and it fails on [destination ip address here] Failed to install deployment service. Obviously if you also have a device between your windows servers such as a physical firewall you will need to also manually open those same ports through it. Since Linux Backup Proxies require Veeam Data Mover Service, make sure the user account you specify is a root user or a user elevated to root. From a security point of view it could be a good idea segregates all Veeam components as much as possible. Fibre Channel Protocol The proxy must have a Fibre channel adapter installed and must have access to the storage system over Fibre Channel fabric. Dec 28, 2018 · Ports use HPE StoreOnce Catalyst Copy technology to copy backup files? by Fegume » Wed Jul 15, 2020 10:46 am Hi, I setting two StoreOnces and I need know what ports I need open in my Firewall? Only One Veeam server (with proxy and gateway rols) StoreOnce 1 StoreOnce2 StoreOnce 1 <--- (Open ports?)-----> StoreOnce 2 thanks! Veeam Hyper-V backup proxies Veeam Backup & Replication provides two different backup modes to process Hyper-V backups, both relying on the Microsoft VSS framework. We normally do that with telnet. While the backup server administers tasks, the proxy processes jobs and Per the documentation you linked, (at the top) veeam should automatically add all required ports in windows firewall. 0. This information was specifically needed when accessing a windows system in a Cloud Configuration but would also be applicable in any firewall environment. 6162 is for Linux) We have also seen that Veeam. Jan 25, 2024 · The VMware backup proxy retrieves data from the production storage, compresses, deduplicates and sends it to the backup repository. If the backup server is deployed as a part of the Mine cluster, the necessary ports are opened Proxy Server The following ports are required for the proxy server. Network Ports Between Veeam Backup Server and Veeam Proxy Between Veeam Proxy and Veeam Data Cloud Vault Repository Nov 30, 2023 · This port is used by Veeam Backup Enterprise Manager to collect data from backup servers. Copying the executables is a simple command which every windows server can perform: 1. Feb 19, 2024 · hi veeam communityI want to turn on the firewall of the backup server and configure the firewallI have veeam backup and enterprise manager on my serverThe servers that are backed up are mostly on hyper-v cluster. On the Aug 13, 2019 · Veeam Backup & Replication will attempt to automatically open ports used by the Veeam Data Mover service. In addition to it, the Veeam Backup & Replication console uses this service port to connect to the backup server. It's not necessary to open the entire range User guide detailing network ports for Veeam Backup & Replication in VMware vSphere. You should have this port opened to successfully backup your VMs. Review Microsoft Entra Application Permissions Step 5. Backup Server The following tables describe network ports that must be opened to ensure proper communication of the backup server May 2, 2025 · The following tables describe network ports that must be opened to ensure proper communication of components in the Veeam Agent management infrastructure. exe is now a new process listening on ports 6190 and 6290. Sep 17, 2025 · On backup infrastructure components, Veeam Backup & Replication automatically creates firewall rules for the required ports on Windows-based machines. To enable Proxy for a Management Server: Open the OpsMgr console using the account with administrative rights. The aim is to reduce the amount of effort there is in identifying the ports required between different Jul 29, 2024 · To enable communication between a Windows Server (proxy) and a Veeam Backup Server, you'll need to open the following ports: From Veeam Backup Server to Windows Server (proxy): Mar 24, 2025 · 1To manage outbound traffic, TCP outgoing ports must be opened for backup proxy servers, Amazon and Azure archiver appliances. Add the VM as a new Managed Server Access the Backup Infrastructure area, right click Managed Server and . Here are some examples of the most important ports: TCP port 10001 to 10300: These ports are used for communication between the Veeam backup server and the proxy servers and repositories. Proxy. For information on how to configure WinHTTP settings, see Microsoft Docs. This is easy to do from the add a proxy/repo wizard in VBR. You can find the lists of the Feb 18, 2020 · Re: Veeam proxy firewall ports by foggy » Fri Oct 02, 2020 9:59 pm Hi Kevin, these ports should be open in both directions, and please also consider the requirements for backup proxy and backup repository ports. What communications occur between the proxies and repository? What protocols and ports? Physical VBR server, physical Ubuntu 20. I know IPv6 is not used by Veeam (not sure why?). Since Datadog is a company-wide deployment, it was decided to have the Veeam transport service use a different port. Nov 7, 2012 · I'm trying to test a proxy server at a remote location over the WAN that will provide a repository to a Veeam backup server at a different location. Oracle Database Server The following table describes network ports that must be opened to ensure proper communication of the Oct 26, 2017 · Veeam Community discussions and solutions for: Where to find the manually installation for Guest interaction proxy of Microsoft Hyper-V Jun 3, 2022 · If limitations on EC2 Instance Type or Azure VM Size are in place that prevent Veeam Backup & Replication from creating the Proxy Appliance, the Archive Job will fail. However, if that fails, you may need to configure the Linux server's firewall manually. Syntax This cmdlet provides parameter sets that allow you to: Add Windows-based backup proxy server. Backup Appliance The following table Sep 5, 2023 · The Backup Proxy reads the VM data from your production environment and then sends it to the Veeam Gateway Server. In the inventory pane, select Backup Proxies . Our backups are very snappy however guest file restores are very slow. Dec 16, 2024 · The following tables list network ports that must be opened to manage inbound and outbound traffic. You can find the lists of the Mar 4, 2024 · User Guide > Planning and Preparation > Ports Ports Mine with Veeam uses specific ports to allow communication between the solution components. com and select ‘Ports List Finder’. The Guest interaction proxy Server is used in a backup Job for copying the „Application Aware Executables“ to the guest. Jun 24, 2019 · Which ports must be opened on the firewall to allow access from my Veeam Backup server/software to a NAS device on the DR site ? The Veeam backup will be configured to make the normal backups on a local available NAS and do a copy of it to the DR site for. 0 Refers to connections to the Veeam Backup Repository and Backup Proxy in Veeam B&R version 9. Communication Between Veeam Backup & Replication Feb 19, 2025 · The following tables list network ports that must be opened to manage inbound and outbound traffic. If both the Isolation Test and the Archiving Job fails, investigate the network connection between the Gateway and the Proxy Appliance. utekslfkjt63wobvpsz07jswj2pubsr0aku4om6ke1sbaubsvc