Firewall port requirements for NetBackup for VMware agent

Problem

Firewall port requirements for the NetBackup for VMware agent.

Solution

The NetBackup backup host always requires connectivity to the VMware vCenter server at port 443 (TCP).

When using nbd as the backup or restore transport type the NetBackup backup host will need connectivity to each ESX/ESXi host at port 902 (TCP).

When using VMware Intelligent Policy (VIP), i.e. query builder, the NetBackup master server requires connectivity to the VMware vCenter server port 443 (TCP).

Note:  Ports 443 and 902 are default ports for VMware.  If these have been changed from the default in your VMware environment,the firewall requirements will change accordingly.

Note: The NetBackup backup host is also sometimes referred to as any of the following:

• Proxy server
• Access host
• VMware backup host
• Recovery host (at restore time)

If you use the Instant Recovery for Vmware option you will also need to Open TCP port 7394 (nbfsd) and 111 (portmap) from the target ESX server to the media server.

Additional information on port requirements for the NetBackup VMware agent are available in the "Netting Out NetBackup" article:

Nuts and bolts in NetBackup for VMware: Transport methods and TCP ports
https://vox.veritas.com/t5/Netting-Out-NetBackup-Blog/Nuts-and-bolts-in-NetBackup-for-VMware-Transport-methods-and-TCP/ba-p/789630

Also see the Related Articles section to the right of the article body.