Which TCP/UDP ports are used by Backup Exec for Windows Servers 11d and above (including CPS – Continuous Protection Server and DLO – Desktop & Laptop Option) and Backup Exec System Recovery (BESR)?
Backup Exec for Windows Servers Ports:
| Service or Process | Port | Port Type |
|---|---|---|
| Backup Exec Agent Browser (process=benetns.exe) | 6101 | TCP |
| Backup Exec Remote Agent for Windows Servers (process=beremote.exe) | 10000 | TCP |
| Backup Exec Server (process=beserver.exe) | 3527 | TCP |
| 6106 | TCP | |
| MSSQL$BKUPEXEC (process=sqlservr.exe) | 1125 | TCP |
| 1434 (ms-sql-m) | UDP | |
| Backup Exec Remote Agent for NetWare | 10000 (Backup Exec 10.x) | TCP |
| 6102 (Backup Exec 9.x) | TCP | |
| Oracle Agent for Windows and Linux Servers | Random port unless | |
| configured otherwise | ||
| DB2 Agent for Windows and Linux Servers | Random port unless | |
| configured otherwise | ||
| Remote Agent for Linux or Unix Servers (RALUS) | Default NDMP port, typically | |
| 10000 | TCP | |
| Kerberos | 88 | UDP |
| NETBIOS | 135 | TCP, UDP |
| NETBIOS Name Service | 137 | UDP |
| NETBIOS Datagram Service | 138 | UDP |
| NETBIOS Session Service | 139 | TCP |
| NETBIOS (Windows 2000) | 445 | TCP |
| DCOM/RPC | 3106 | TCP |
| Backup Exec Remote Agent | 6103 | TCP |
| Push Install — Check for conflicts in message queue for CASO which is part of beserver.exe | 103x | TCP |
| Push Install | 441 | TCP |
| SMTP email notification | 25 outbound from media server | TCP |
| SNMP | 162 outbound from media server | TCP |
| FTP | 21 | TCP |
| HTTP | 80 | TCP |
| HTTPS | 443 | TCP |
Backup Exec for Windows Servers Listening Ports:
First, it is important to understand the difference between using a port for listening versus for dynamic or ad-hoc communication. When Backup Exec for Windows Servers is not running any operations, the various services are listening on ports for incoming communication from other services and/or agents. During operations such as backups, a Backup Exec for Windows Server (9.x & 10.x) will first communicate to the Remote Agent on the static listening port (control connection) and then pass data back and forth using dynamic (ad-hoc) ports that are either random (by default) or can be configured to use a specific range. More detail on limiting the port ranges for Remote Agent communications can be found in the Related Documents area at the bottom of this document.
| Service | Port | Port Type |
|---|---|---|
| Backup Exec Agent Browser (benetns.exe) | 6101 | TCP |
| Backup Exec Remote Agent for Windows Server (beremote.exe) | 10000 | TCP |
| Backup Exec Server (beserver.exe) | 3527, 6106 | TCP |
| MSSQL$BKUPEXEC (sqlservr.exe) | 1125 | TCP |
| 1434 | UDP | |
| Backup Exec Remote Agent for NetWare | 10000, 6102 | TCP |
| Remote Agent for Linux and UNIX Servers (RALUS) | 10000 | TCP |
| DBA-initiated backups for Oracle and DB2 | 5633 | TCP |
<!–[if !supportLineBreakNewLine]–>
<!–[endif]–>
Backup Exec Continuous Protection Server Ports:
|
Service |
Port |
Port Type |
Editable Registry Key |
|
Network Helper Service (ENL) |
1804 |
UDP |
HKLMSoftwareSymantecEnlNetwork |
|
CPA Data |
20481 |
TCP |
HKLMSoftwareSymantecBackup Exec CPSParametersCommunicationsFfxport |
|
CPA RPC |
20483 |
TCP |
HKLMSoftwareSymantecBackup Exec CPSParaParametersRpc InterfaceRxrsastaticport |
|
CMS RPC |
20485 |
TCP |
HKLMSoftwareSymantecBackup Exec CPSParaParametersRpc InterfaceRxrmsstaticport |
|
Web Restore Server Component (http) |
8181 |
TCP |
To change the Web Restore Server Component port numbers, see the following TechNote given in the related section. |
|
Web Restore Server Component (https) |
8443 |
TCP |
To change the Web Restore Server Component port numbers, see the following TechNote given in the related technote section. |
Backup Exec Continuous Protection Server “Local Only” Ports:
|
Service |
Port |
Port Type |
Description |
|
Beremote.exe |
10000 |
TCP |
Used by RAWS |
|
SUIR.exe |
9000 – 9003 |
TCP |
Querying and controlling the indexing engine. |
|
VRTSweb.exe |
14300 |
TCP |
The admin control port for stopping and restarting the web server |
|
Vsr_dbsrv9.exe Database Service |
20487, 2638 |
TCP, UDP |
The database actively prevents remote connections from being made to these ports. |
|
WRG.exe (Web restore backend service) |
13730 |
TCP |
The web restore gateway |
<!–[if !supportLineBreakNewLine]–>
<!–[endif]–>
Backup Exec Desktop and Laptop Option Ports:
|
Service or Process |
Port |
Port Type |
|
Server Message Block (SMB) communication |
135-139 |
TCP/UDP |
|
Server Message Block (SMB) communication without NETBIOS |
445 |
TCP/UDP |
|
SQL |
1434 |
TCP/UDP |
|
DLOAdminSvcu.exe (DLO admin service) |
3999 in listening mode |
TCP/UDP |
Backup Exec System Recovery Client Ports:
|
Service |
Port |
Port Type |
|
DCOM |
1024-65535 |
TCP |
|
135 |
TCP |
|
|
137-139 |
TCP |
Backup Exec System Recovery Manager Ports:
|
Service |
Port |
Port Type |
|
Web Service (https) |
8443 |
TCP |
|
Web Service (http) |
8080 |
TCP |
|
Publisher |
763 |
TCP |
|
Index Publisher |
764 |
TCP |
|
Console Smart Refresh |
No Default: Configurable by User |
Backup Exec System Recovery Retrieve Ports:
|
Service |
Port |
Port Type |
|
CPS Administration |
20485 |
TCP |
|
HTTP for non-secure connection to the web server |
8080 |
TCP |
|
HTTP for secure connection to the web server |
8443 |
TCP |