Backup through Firewall

[George_Montany]

HELP !!!!

Firewall port assignment for Backup Exec is confusing the @&$%# out of me.

• Port 10000 outbound only from internal to DMZ (ControlSessionPort)
• Port 30000 inbound only from DMZ to Internal (Control Acknowledgement)
• Port 30001 outbound only from internal to DMZ (Response / Send data initiation)
• Port 30002-30027 inbound only from DMZ to internal (Actual data transfer/backup)
• Plus Port 6101 outbound from internal to DMZ to browse Windows systems in the backup selections tree

Is this correct and will this work to backup 3 servers in my DMZ, one server at a time with 30 minutes between jobs?

[Jared_S_]

Hi George -

There are certain ports than need to be open in order for Backup Exec to work properly to a firewall. Here are some documents that further explain and may offer you a resolution:

What TCP/UDP <ports> does Backup Exec <11d> for Windows Servers (including CPS and DLO) and Backup Exec System Recovery use?

http://support.veritas.com/docs/285830

 Improving Backup Exec performance

http://support.veritas.com/docs/285756

How to change the default port used by the Backup Exec 9.x, 10.x and 11.x Remote Agent for Windows Servers

http://support.veritas.com/docs/255174

How to configure Backup Exec to use a port other than 3527 if it is being used by another application

http://support.veritas.com/docs/274583

I hope these help!

- Jared

[George_Montany]

Thanks, but no, it does not help.

I read those docs up and down 10 times at least.

What I need to know is if the above posted will work or not.

Yes or no will do for starters.

If the answer is no, then maybe a pointer as to what is incorrect would be great.

[Jared_S_]

George -

Since you have both ports 6101 and 10000 open then yes the configuration should work. The only caution is to ensure no other program will be accessing these ports that could cause communication interruption.

- Jared

[pie8ter]

I am glad I am not the only one who is having difficult time dicphering the arcane documentation for the firewall configuration so we can backup DMZ clients from LAN.  Unless backing up through firewall is an unsupported feature, Backup Exec should at least do a decent job of clearly explaining the configuration.  All I see in the documentation is "here are bunch of port numbers and allow them in the firewall".  Sure but what direction the traffic flows?  Who initiates the primary and secondary connections?  Like this poster, I read all the documentations 10 times up and down with frustrations.  I beginning to think people who get this setup working actually don't know what they are doing.  With the very poor documentation, I don't blame them.