List of TCP/UDP ports used by Backup Exec 11d and above (including CPS and DLO) and BE System Recovery (BESR)

Problem

This article provides a list of TCP/UDP ports required by Backup Exec for Windows Servers 11d and above (including Continuous Protection Server and Desktop & Laptop Option) and Backup Exec System Recovery (BESR).

Solution

Backup Exec for Windows Servers Ports:
 
Service or ProcessPortPort Type
Backup Exec Agent Browser (process=benetns.exe)6101TCP
Backup Exec Remote Agent for Windows Servers (process=beremote.exe)10000TCP
Backup Exec Server (process=beserver.exe)3527TCP
 6106TCP
MSSQL$BKUPEXEC (process=sqlservr.exe)1125TCP
 1434 (ms-sql-m)UDP
Backup Exec Remote Agent for NetWare10000 (Backup Exec 10.x)TCP
 6102 (Backup Exec 9.x)TCP
Oracle Agent for Windows and Linux ServersRandom port unless 
 configured otherwise 
DB2 Agent for Windows and Linux ServersRandom port unless 
 configured otherwise 
Remote Agent for Linux or Unix Servers (RALUS)Default NDMP port, typically 
 10000TCP
Kerberos88UDP
NETBIOS135TCP, UDP
NETBIOS Name Service137UDP
NETBIOS Datagram Service138UDP
NETBIOS Session Service139TCP
NETBIOS (Windows 2000)445TCP
DCOM/RPC3106TCP
Backup Exec Remote Agent6103TCP
Push Install -- Check for conflicts in message queue for CASO which is part of beserver.exe103xTCP
Push Install -- SMB2445TCP
SMTP email notification25 outbound from media serverTCP
SNMP162 outbound from media serverTCP
FTP21TCP
HTTP80TCP
HTTPS443TCP

Backup Exec for Windows Servers Listening Ports:
 
First, it is important to understand the difference between using a port for listening versus for dynamic or ad-hoc communication.
 
When Backup Exec for Windows Servers is not running any operations, the various services are listening on ports for incoming communication from other services and/or agents.
 
During operations such as backups, a Backup Exec for Windows Server will first communicate to the Remote Agent on the static listening port (control connection) and then pass data back and forth using dynamic (ad-hoc) ports that are either random (by default) or can be configured to use a specific range. 
 
More detail on limiting the port ranges for Remote Agent communications can be found in the Related Documents area at the bottom of this document.
 
ServicePortPort Type
Backup Exec Agent Browser (benetns.exe)6101TCP
Backup Exec Remote Agent for Windows Server (beremote.exe)10000TCP
Backup Exec Server (beserver.exe)3527, 6106TCP
MSSQL$BKUPEXEC (sqlservr.exe)1125TCP
 1434UDP
Backup Exec Remote Agent for NetWare10000, 6102TCP
Remote Agent for Linux and UNIX Servers (RALUS)10000TCP
DBA-initiated backups for Oracle and DB25633

TCP

Backup Exec Deduplication Engine (spoold.exe)10082TCP
Backup Exec Deduplication Manager (spad.exe)10102TCP

Backup Exec Continuous Protection Server Ports:
 
ServicePortPort TypeEditable Registry Key
Network Helper Service (ENL)1804UDPHKLM\Software\Symantec\Enl\Network
CPA Data20481TCPHKLM\Software\Symantec\Backup Exec CPS\Parameters\Communications\Ffxport
CPA RPC20483TCPHKLM\Software\Symantec\Backup Exec CPS\Para\Parameters\Rpc Interface\Rxrsastaticport
CMS RPC20485TCPHKLM\Software\Symantec\Backup Exec CPS\Para\Parameters\Rpc Interface\Rxrmsstaticport
Web Restore Server Component (http)8181TCPTo change the Web Restore Server Component port numbers, see the following TechNote given in the related section.
Web Restore Server Component (https)8443TCPTo change the Web Restore Server Component port numbers, see the following TechNote given in the related technote section.

Backup Exec Continuous Protection Server "Local Only" Ports:
 
ServicePortPort TypeDescription
Beremote.exe10000TCPUsed by RAWS
SUIR.exe9000 - 9003TCPQuerying and controlling the indexing engine.
VRTSweb.exe14300TCPThe admin control port for stopping and restarting the web server
Vsr_dbsrv9.exe Database Service20487, 2638TCP, UDPThe database actively prevents remote connections from being made to these ports.
WRG.exe (Web restore backend service)13730TCPThe web restore gateway

Backup Exec Desktop and Laptop Option Ports:
 
Service or ProcessPortPort Type
Server Message Block (SMB) communication135-139TCP/UDP
Server Message Block (SMB) communication without NETBIOS445TCP/UDP
SQL1434TCP/UDP
DLOAdminSvcu.exe (DLO admin service)3999 in listening modeTCP/UDP

Backup Exec System Recovery Client Ports:
 
ServicePortPort Type
DCOM1024-65535TCP
 135TCP
 137-139TCP

Backup Exec System Recovery Manager Ports:
 
ServicePortPort Type
Web Service (https)8443TCP
Web Service (http)8080TCP
Publisher763TCP
Index Publisher764TCP
Console Smart RefreshNo Default: Configurable by User 

Backup Exec System Recovery Retrieve Ports:
 
ServicePortPort Type
CPS Administration20485TCP
HTTP for non-secure connection to the web server8080TCP
HTTP for secure connection to the web server8443TCP

Terms of use for this information are found in Legal Notices.

Search

Survey

Did this article answer your question or resolve your issue?

No
Yes

Did this article save you the trouble of contacting technical support?

No
Yes

How can we make this article more helpful?

Email Address (Optional)