Ransomware attackers specifically target and attempt to destroy backup systems to increase the probability of payment. Hardening your system is critical. Please ensure you have reviewed your platform security using the Security Hardening Checklist
Cohesity

COHESITY Documentation

Explore our documentation to get started, discover products & new features, access troubleshooting guides, register sources, platforms support.

Products
Data Security Alliance
Visit Cohesity.com
Demos
Support
Blogs
Developers
Partner Portals
Cohesity Community
© 2026 Cohesity, Inc. All Rights Reserved.
Terms of Use|
Privacy Policy|
Legal|
  1. Home
  2. NetBackup™ Network Ports Reference Guide
  3. NetBackup Ports
  4. NetBackup Snapshot Manager ports
NetBackup™ Network Ports Reference Guide

NetBackup Snapshot Manager ports

The following table lists the ports that are used between NetBackup and NetBackup Snapshot Manager. The required ports must be opened if firewall exists between the ports.

Table: Ports that must be open in a environment with NetBackup Snapshot Manager

Source

Port

Destination

Description

Primary server

443

Snapshot Manager

To handle API requests. If configured with default port else inbound must be allowed by firewall for custom port.

Media server

443

Snapshot Manager

To handle API requests. If configured with default port else inbound must be allowed by firewall for custom port.

Client

443

Snapshot Manager

To handle API requests. If configured with default port else inbound must be allowed by firewall for custom port.

Snapshot Manager agents

5671

Snapshot Manager

Interaction with Snapshot Manager agents.

Snapshot Manager

1556

Primary server

Registration with NetBackup primary server.

NetBackup Snapshot Manager for Cloud

Additional ports required for agentless communication with the protected VMs

The following table lists the additional network ports that are required and must be open when NetBackup Snapshot Manager for Cloud is using agentless communication with the protected VMs:

Table: Additional ports required for agentless communication with the protected VMs

Source

Port

Destination

Description

Snapshot Manager

22

Linux and Windows VM

For agentless connection to Linux/Windows VM (OpenSSH).

Additional ports required for Single File Restore (SFR) from a backup copy

  • For Windows: Ports 139 and 445 must be open outbound from the clients (target VMs on which on-host agents are running) to access SMB share from the storage server(s).

  • For Linux: Ports 2049 and 111, the standard NFS ports, 2049 and 111 must be open outbound from the clients (target VMs on which on-host agents are running) to access NFS share from the storage server(s).

Feedback

Was this page helpful?
Previous

NetBackup WORM storage server network ports

Next

NetBackup web UI ports

Feedback

Was this page helpful?