Veeam | Backup Ports [patched]

✅ : Run the Veeam Ports Checker (free script or built‑in in v12) before any firewall change.

Veeam Backup & Replication is a popular data backup and recovery solution used by organizations to protect their critical data. When implementing Veeam Backup & Replication, it's essential to understand the ports used for communication between components to ensure proper configuration and avoid connectivity issues.

Required for Veeam Guest Processing (installing Veeam Agent inside the VM for transaction consistency). veeam backup ports

Some Veeam Backup & Replication features require additional ports:

Required for backup and replication of Hyper-V VMs. ✅ : Run the Veeam Ports Checker (free

| Service | Port | Direction | Notes | |---------|------|-----------|-------| | Veeam Backup Service | TCP 9392 (default) | Backup Server ↔ Components | Core control channel | | Veeam Broker Service | TCP 9393 | Backup Server ↔ vCenter/Hyper-V | Hypervisor communication | | Veeam Distribution Service | TCP 9394 | Backup Server ↔ Repositories | Used for task distribution | | Veeam REST API | TCP 9419 | Client → Backup Server | Enterprise Manager / REST |

| Source | Destination | Port | Protocol | Description | | :--- | :--- | :--- | :--- | :--- | | | vCenter / ESXi | 443 | TCP | Standard HTTPS connection for API communication. | | Backup Proxy | ESXi Host | 902 | TCP | NBD (Network Block Device) transport mode. | | Backup Proxy | ESXi Host | 443 | TCP | NBDSSL (Secure) transport mode. | | Backup Proxy | VM Guest OS | VIX | TCP | Port 443 or 902 depending on configuration (Used for Application-Aware Processing). | Required for Veeam Guest Processing (installing Veeam Agent

Here is a comprehensive list of the default network ports used by Veeam Backup & Replication, categorized by function.

A dynamic range assigned for data transmission channels. For every TCP connection used by a job, a port from this range is selected.