| Source | Destination | Protocol | Port | | --- | --- | --- | --- | | Veeam Backup Server | Backup Repository | TCP | 2501, 2502 | | Veeam Backup Server | Veeam Mount Server | TCP | 2020 | | Veeam Backup Server | Veeam Guest Interaction Proxy | TCP | 6161 | | Veeam Backup Server | Veeam Backup & Replication Console | HTTPS | 9399 |
| Source | Destination | Port | Protocol | Description | | :--- | :--- | :--- | :--- | :--- | | | vCenter / ESXi | 443 | TCP | Standard HTTPS connection for API communication. | | Backup Proxy | ESXi Host | 902 | TCP | NBD (Network Block Device) transport mode. | | Backup Proxy | ESXi Host | 443 | TCP | NBDSSL (Secure) transport mode. | | Backup Proxy | VM Guest OS | VIX | TCP | Port 443 or 902 depending on configuration (Used for Application-Aware Processing). |
Here is a comprehensive list of the default network ports used by Veeam Backup & Replication, categorized by function.
– vSphere HotAdd (TCP 902) works, but NBD/SSL requires 443 and 902 . Many backup failures happen when 443 is blocked.
To ensure proper communication between Veeam Backup & Replication components, the following ports must be open: