List of TCP/UDP ports used by Backup Exec 11d and above (including CPS and DLO) and BE System Recovery (BESR)

Article:TECH49563  |  Created: 2006-01-07  |  Updated: 2014-07-07  |  Article URL http://www.symantec.com/docs/TECH49563
Article Type
Technical Solution


Subject

Issue



This article provides a list of TCP/UDP ports required by Backup Exec for Windows Servers 11d and above (including Continuous Protection Server and Desktop & Laptop Option) and Backup Exec System Recovery (BESR).


Solution



Backup Exec for Windows Servers Ports:
 
Service or Process Port Port Type
Backup Exec Agent Browser (process=benetns.exe) 6101 TCP
Backup Exec Remote Agent for Windows Servers (process=beremote.exe) 10000 TCP
Backup Exec Server (process=beserver.exe) 3527 TCP
  6106 TCP
MSSQL$BKUPEXEC (process=sqlservr.exe) 1125 TCP
  1434 (ms-sql-m) UDP
Backup Exec Remote Agent for NetWare 10000 (Backup Exec 10.x) TCP
  6102 (Backup Exec 9.x) TCP
Oracle Agent for Windows and Linux Servers Random port unless  
  configured otherwise  
DB2 Agent for Windows and Linux Servers Random port unless  
  configured otherwise  
Remote Agent for Linux or Unix Servers (RALUS) Default NDMP port, typically  
  10000 TCP
Kerberos 88 UDP
NETBIOS 135 TCP, UDP
NETBIOS Name Service 137 UDP
NETBIOS Datagram Service 138 UDP
NETBIOS Session Service 139 TCP
NETBIOS (Windows 2000) 445 TCP
DCOM/RPC 3106 TCP
Backup Exec Remote Agent 6103 TCP
Push Install -- Check for conflicts in message queue for CASO which is part of beserver.exe 103x TCP
Push Install -- SMB2 445 TCP
SMTP email notification 25 outbound from media server TCP
SNMP 162 outbound from media server TCP
FTP 21 TCP
HTTP 80 TCP
HTTPS 443 TCP

Backup Exec for Windows Servers Listening Ports:
 
First, it is important to understand the difference between using a port for listening versus for dynamic or ad-hoc communication.
 
When Backup Exec for Windows Servers is not running any operations, the various services are listening on ports for incoming communication from other services and/or agents.
 
During operations such as backups, a Backup Exec for Windows Server will first communicate to the Remote Agent on the static listening port (control connection) and then pass data back and forth using dynamic (ad-hoc) ports that are either random (by default) or can be configured to use a specific range. 
 
More detail on limiting the port ranges for Remote Agent communications can be found in the Related Documents area at the bottom of this document.
 
Service Port Port Type
Backup Exec Agent Browser (benetns.exe) 6101 TCP
Backup Exec Remote Agent for Windows Server (beremote.exe) 10000 TCP
Backup Exec Server (beserver.exe) 3527, 6106 TCP
MSSQL$BKUPEXEC (sqlservr.exe) 1125 TCP
  1434 UDP
Backup Exec Remote Agent for NetWare 10000, 6102 TCP
Remote Agent for Linux and UNIX Servers (RALUS) 10000 TCP
DBA-initiated backups for Oracle and DB2 5633

TCP

Backup Exec Deduplication Engine (spoold.exe) 10082 TCP
Backup Exec Deduplication Manager (spad.exe) 10102 TCP

Backup Exec Continuous Protection Server Ports:
 
Service Port Port Type Editable Registry Key
Network Helper Service (ENL) 1804 UDP HKLM\Software\Symantec\Enl\Network
CPA Data 20481 TCP HKLM\Software\Symantec\Backup Exec CPS\Parameters\Communications\Ffxport
CPA RPC 20483 TCP HKLM\Software\Symantec\Backup Exec CPS\Para\Parameters\Rpc Interface\Rxrsastaticport
CMS RPC 20485 TCP HKLM\Software\Symantec\Backup Exec CPS\Para\Parameters\Rpc Interface\Rxrmsstaticport
Web Restore Server Component (http) 8181 TCP To change the Web Restore Server Component port numbers, see the following TechNote given in the related section.
Web Restore Server Component (https) 8443 TCP To change the Web Restore Server Component port numbers, see the following TechNote given in the related technote section.

Backup Exec Continuous Protection Server "Local Only" Ports:
 
Service Port Port Type Description
Beremote.exe 10000 TCP Used by RAWS
SUIR.exe 9000 - 9003 TCP Querying and controlling the indexing engine.
VRTSweb.exe 14300 TCP The admin control port for stopping and restarting the web server
Vsr_dbsrv9.exe Database Service 20487, 2638 TCP, UDP The database actively prevents remote connections from being made to these ports.
WRG.exe (Web restore backend service) 13730 TCP The web restore gateway

Backup Exec Desktop and Laptop Option Ports:
 
Service or Process Port Port Type
Server Message Block (SMB) communication 135-139 TCP/UDP
Server Message Block (SMB) communication without NETBIOS 445 TCP/UDP
SQL 1434 TCP/UDP
DLOAdminSvcu.exe (DLO admin service) 3999 in listening mode TCP/UDP

Backup Exec System Recovery Client Ports:
 
Service Port Port Type
DCOM 1024-65535 TCP
  135 TCP
  137-139 TCP

Backup Exec System Recovery Manager Ports:
 
Service Port Port Type
Web Service (https) 8443 TCP
Web Service (http) 8080 TCP
Publisher 763 TCP
Index Publisher 764 TCP
Console Smart Refresh No Default: Configurable by User  

Backup Exec System Recovery Retrieve Ports:
 
Service Port Port Type
CPS Administration 20485 TCP
HTTP for non-secure connection to the web server 8080 TCP
HTTP for secure connection to the web server 8443 TCP



Legacy ID



285830


Article URL http://www.symantec.com/docs/TECH49563


Terms of use for this information are found in Legal Notices