ports and directions for BackupExec through firewall

Question

I am trying to get firewall rules approved for a BackupExec 2012 server to backup servers behind a firewall.&nbsp;
I have configured BackupExec to use 25 ports, and submitted the firewall request to have those ports opened to the appropriate machines.
Articles I've read do not indicate a direction.. or indicate bidirectional, but our security team is concerned about implementing bidirectional access because the servers being backed up are on an externally available&nbsp;network, and the backup server is on an internal network.
Can someone answer definitively if the random ports are required only outbound (backup/media server to client agents), inbound (from the clients to the backup/media server), or in both directions?
Thanks in advance.

craigv · Accepted Answer

Hi,

Check the TNs below which should help you further:
http://www.symantec.com/business/support/index?page=content&amp;id=TECH49563
http://www.symantec.com/business/support/index?page=content&amp;id=HOWTO22990
http://www.symantec.com/business/support/index?page=content&amp;id=HOWTO22988#v21810998
Thanks!

colin_weaver · Answer

Craig V has given the approproate documentation however a few comments:
As long as you don't want to do push installs of the remote agent from media server to remote server then you might be able to get away with&nbsp;
Port&nbsp;10,000 outbound from media server to remote
A small configurarable range of at least 20 ports (Configured in BWE with dynamic port range setting) - again outbound from media server to remote.
In both of the instances above the ports in effect end up as listening ports on the remote system, the ports on the media server that then make the connections are always random.
Depending on the agents being used/type of data being backed up you might also need port 6101 (advertising) which is Inbound from remoet agent to media server.
&nbsp;
if you are using this like managed backup exec (MBE/MMS) servers across firewalls, push install etc then more will be needed.

Forum Discussion

ports and directions for BackupExec through firewall

2 Replies

Related Content

BackupExec for Oracle 23ai?

How to find which user initiated immediate/user-directed backup?

Re: All local drives, System State, shadow copy components

Re: Backup Exec 15 firewall ports requirements

Backupexec has stopped working

Recent Discussions

Backup Exec Job got canceled

BackupExec for Oracle 23ai?

Add Oracle DB in Backup Exec

Veritas Backup Exec version upgrade & migrate to another new Server

Veritas Backup Exec 23 - Slow Backup after Windows server 2019 upgrade