What TCP/UDP ports does Backup Exec for Windows Servers 11d and above (including CPS - Continuous Protection Server and DLO - Desktop & Laptop Option) and Backup Exec System Recovery (BESR) use?
Details:
Backup Exec for Windows Servers
Ports: | Service or Process | Port | Port Type |
|---|
| Backup Exec Agent Browser (process=benetns.exe) | 6101 | TCP |
| Backup Exec Remote Agent for Windows Servers (process=beremote.exe) | 10000 | TCP |
| Backup Exec Server (process=beserver.exe) | 3527 | TCP |
| | 6106 | TCP |
| MSSQL$BKUPEXEC (process=sqlservr.exe) | 1125 | TCP |
| | 1434 (ms-sql-m) | UDP |
| Backup Exec Remote Agent for NetWare | 10000 (Backup Exec 10.x) | TCP |
| | 6102 (Backup Exec 9.x) | TCP |
| Oracle Agent for Windows and Linux Servers | Random port unless | |
| | configured otherwise | |
| DB2 Agent for Windows and Linux Servers | Random port unless | |
| | configured otherwise | |
| Remote Agent for Linux or Unix Servers (RALUS) | Default NDMP port, typically | |
| | 10000 | TCP |
| Kerberos | 88 | UDP |
| NETBIOS | 135 | TCP, UDP |
| NETBIOS Name Service | 137 | UDP |
| NETBIOS Datagram Service | 138 | UDP |
| NETBIOS Session Service | 139 | TCP |
| NETBIOS (Windows 2000) | 445 | TCP |
| DCOM/RPC | 3106 | TCP |
| Backup Exec Remote Agent | 6103 | TCP |
| Push Install -- Check for conflicts in message queue for CASO which is part of beserver.exe | 103x | TCP |
| Push Install | 441 | TCP |
| SMTP email notification | 25 outbound from media server | TCP |
| SNMP | 162 outbound from media server | TCP |
| FTP | 21 | TCP |
| HTTP | 80 | TCP |
| HTTPS | 443 | TCP |
Backup Exec for Windows Servers Listening Ports:
First, it is
important to understand the difference between using a port for listening versus
for dynamic or ad-hoc communication. When Backup Exec for Windows Servers is not
running any operations, the various services are listening on ports for incoming
communication from other services and/or agents. During operations such as
backups, a Backup Exec for Windows Server (9.x & 10.x) will first
communicate to the Remote Agent on the static listening port (control
connection) and then pass data back and forth using dynamic (ad-hoc) ports that
are either random (by default) or can be configured to use a specific range.
More detail on limiting the port ranges for Remote Agent communications can be
found in the Related Documents area at the bottom of this document.
| Service | Port | Port Type |
|---|
| Backup Exec Agent Browser (benetns.exe) | 6101 | TCP |
| Backup Exec Remote Agent for Windows Server (beremote.exe) | 10000 | TCP |
| Backup Exec Server (beserver.exe) | 3527, 6106 | TCP |
| MSSQL$BKUPEXEC (sqlservr.exe) | 1125 | TCP |
| | 1434 | UDP |
| Backup Exec Remote Agent for NetWare | 10000, 6102 | TCP |
| Remote Agent for Linux and UNIX Servers (RALUS) | 10000 | TCP |
| DBA-initiated backups for Oracle and DB2 | 5633 | TCP |
Backup Exec Continuous Protection Server
Ports: | Service | Port | Port Type | Editable Registry Key |
|---|
| Network Helper Service (ENL) | 1804 | UDP | HKLM\Software\Symantec\Enl\Network |
| CPA Data | 20481 | TCP | HKLM\Software\Symantec\Backup Exec CPS\Parameters\Communications\Ffxport |
| CPA RPC | 20483 | TCP | HKLM\Software\Symantec\Backup Exec CPS\Para\Parameters\Rpc Interface\Rxrsastaticport |
| CMS RPC | 20485 | TCP | HKLM\Software\Symantec\Backup Exec CPS\Para\Parameters\Rpc Interface\Rxrmsstaticport |
| Web Restore Server Component (http) | 8181 | TCP | To change the Web Restore Server Component port numbers, see the following TechNote given in the related section. |
| Web Restore Server Component (https) | 8443 | TCP | To change the Web Restore Server Component port numbers, see the following TechNote given in the related technote section. |
Backup Exec Continuous Protection Server "Local Only"
Ports: | Service | Port | Port Type | Description |
|---|
| Beremote.exe | 10000 | TCP | Used by RAWS |
| SUIR.exe | 9000 - 9003 | TCP | Querying and controlling the indexing engine. |
| VRTSweb.exe | 14300 | TCP | The admin control port for stopping and restarting the web server |
| Vsr_dbsrv9.exe Database Service | 20487, 2638 | TCP, UDP | The database actively prevents remote connections from being made to these ports. |
| WRG.exe (Web restore backend service) | 13730 | TCP | The web restore gateway |
Backup Exec Desktop and Laptop Option
Ports: | Service or Process | Port | Port Type |
|---|
| Server Message Block (SMB) communication | 135-139 | TCP/UDP |
| Server Message Block (SMB) communication without NETBIOS | 445 | TCP/UDP |
| SQL | 1434 | TCP/UDP |
| DLOAdminSvcu.exe (DLO admin service) | 3999 in listening mode | TCP/UDP |
Backup Exec System Recovery Client
Ports: | Service | Port | Port Type |
|---|
| DCOM | 1024-65535 | TCP |
| | 135 | TCP |
| | 137-139 | TCP |
Backup Exec System Recovery Manager
Ports: | Service | Port | Port Type |
|---|
| Web Service (https) | 8443 | TCP |
| Web Service (http) | 8080 | TCP |
| Publisher | 763 | TCP |
| Index Publisher | 764 | TCP |
| Console Smart Refresh | No Default: Configurable by User | |
Backup Exec System Recovery Retrieve
Ports: | Service | Port | Port Type |
|---|
| CPS Administration | 20485 | TCP |
| HTTP for non-secure connection to the web server | 8080 | TCP |
| HTTP for secure connection to the web server | 8443 | TCP |
Products Applied:
Backup Exec 11d (11.0), 11d (11.0) 6235, 11d (11.0) 7170, 12.0, 12.5
Backup Exec Continuous Protection Server 11d(11.0), 11d(11.0) 6235
Backup Exec Desktop and Laptop Option 11d(11.0), 11d(11.0) 6235
Subjects:
Backup Exec
Application: Backup, Faq, Specified Backup Network
Backup Exec Continuous Protection Server
General: Application
Backup Exec Desktop and Laptop Option
Publishing Status: Video
Security: Customer, Outside Researcher, Symantec Employee
Languages:
English (US)
Operating Systems:
Windows 2000Advanced Server SP4, Server SP4
Windows XP
Pro 5.1 SP2
Windows Server 2003
Enterprise ServerSP1, Standard Server SP1
Windows Small Business Server 2003
Premium Edition, Standard Edition
THE INFORMATION PROVIDED IN THE SYMANTEC SOFTWARE KNOWLEDGE BASE IS PROVIDED "AS IS" WITHOUT WARRANTY OF ANY KIND. SYMANTEC SOFTWARE DISCLAIMS ALL WARRANTIES, EITHER EXPRESS OR IMPLIED, INCLUDING THE WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE. IN NO EVENT SHALL SYMANTEC SOFTWARE OR ITS SUPPLIERS BE LIABLE FOR ANY DAMAGES WHATSOEVER INCLUDING DIRECT, INDIRECT, INCIDENTAL, CONSEQUENTIAL, LOSS OF BUSINESS PROFITS OR SPECIAL DAMAGES,EVEN IF SYMANTEC SOFTWARE OR ITS SUPPLIERS HAVE BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES. SOME STATES DO NOT ALLOW THE EXCLUSION OR LIMITATION OF LIABILITY FOR CONSEQUENTIAL OR INCIDENTAL DAMAGES SO THE FOREGOING LIMITATION MAY NOT APPLY.