cancel
Showing results for 
Search instead for 
Did you mean: 

Getting BE to talk to TMG

HotRob
Level 4
Partner Accredited

On BackupExec Sever:

In the C:\Windows\System32\Drivers\Etc\Services file added the line:

ndmp 12000/tcp #RAWS

(did not have to reboot server)

Under tool/options set the 'Network and Security' to 'Enable remote agent TCP dynamic port range to 1065-65535 (i suppose i could try dropping it to 10000-120000 but it's working so i'm not keen to test it out yet.

On TMG itself:

In the C:\Windows\System32\Drivers\Etc\Services file added the line:

ndmp 12000/tcp #RAWS

and setup a TMG rule to allow all outbound protocols from Backexec Servers to Localhost

 

On each of the servers that need backing up i had to configure:

In the C:\Windows\System32\Drivers\Etc\Services file added the line:

ndmp 12000/tcp #RAWS

and setup a domain only windows firewall outbound rule to allow all outbound protocols

and reboot each machine for this to work.

 

Ran test run on each of the jobs and made sure the result came back passed with an indication of the data amount on the server being scanned.

 

I don't know why it won't just allow me to set the dynamic port range to 10000-12000 and set TMG on port 12000 and leave the others as the standard 10000, but it took a bit of work and now it is backing everything up again happily.

 

Cheers,
Rob

1 REPLY 1

pkh
Moderator
Moderator
   VIP    Certified

There is a bug in the new R3 security.  See Colin Weaver's answer to this discussion.

https://www-secure.symantec.com/connect/forums/backup-exec-agent-tmg-2010#comment-6721701

If you want to disable R3 security

Disable R3 security