To let Acronis products operate properly in the network, you need to open specific ports in Firewall settings.
Acronis Cyber Protect Home Office uses the following ports:
- TCP port 58101 for managing Tray Notification Center, displaying tray notifications about the task status and allowing user interaction
- TCP port 8099 for applying policies
- TCP port 8890 for quarantine (storing activities, providing access to quarantined items)
- TCP port 30630 for Alert Manager Service
- TCP port 9772 for managing malware detection according to policies; managing quarantine; managing database updates; providing alerts to alert manager
- TCP port 58091 for enabling Online Dashboard functionality and registration to cloud
- TCP port 9999 for Authorization and routing requests for other components
- TCP port 6110 for protecting against malware
- Also task-manager.exe uses dynamic port for storing info about ODS, vulnerability assessment, database update tasks
The dynamic ports are managed by the operating system and are assigned randomly. The default dynamic port range in Windows is 49152 – 65535. This range may vary according to the operating system and can be changed manually. You can find more details here.
Acronis True Image uses the following ports:
- TCP ports 443 and 80
- TCP ports 44445 and 55556 for login, activation and access to Acronis cloud
- TCP ports 58085 and 58081 for local mobile backup
- TCP and UDP ports 20 and 21 for backup to FTP
Acronis Cyber Protect 15
- TCP port 43234 for remote installation and remote upgrade
- TCP ports 445 and 25001 for remote installation
- TCP port 6109 for Active Protection
- TCP ports 7780, 7755, 7756, 7765, 9852, 9860, 9862, 9876, 9877 for communication between components
- TCP ports 9850 and 9851 for command line (acrocmd, acropsh) commands
- TCP ports 443 and 902 to access the vCenter Server and ESX(i) hosts
- TCP ports 443 and 44445 for backup to cloud
- TCP port 30800 and 30801 for Alert Feed Manager
- TCP port 2600, 2700 for Archive Server Core
- TCP port 6110 for Acronis Cyber Protect service
- TCP port 31009 for Active Protection Manager
- TCP port 9773 for Antimalware backups scanning
- TCP port 9999 for Authorization and routing requests for different components
- TCP port 18018, 18019, TCP and UDP incoming port 6888, UDP Port 6771 for Acronis updater
- TCP port 1337 for syncing protection policies between server and agent
- TCP port 8081 for Acronis Scheduler2 service
- TCP port 9772 for Acronis Cyber Protect Agent
Acronis Cyber Protect Cloud
Acronis Cyber Backup 12.5, Acronis Backup 12 on-premises deployment
- TCP port 43234 for remote installation and remote upgrade (TCP port 9876 has been used prior to Update 2 of Acronis Backup 12.5)
- TCP ports 445 and 25001 for remote installation
- TCP ports 5905, 7780, 7755, 7756, 7765, 9852, 9860, 9862, 9876, 9877 for communication between components
- TCP ports 9850 and 9851 for command line (acrocmd, acropsh) commands
- TCP ports 443 and 902 to access the vCenter Server and ESX(i) hosts
- TCP ports 443 and 44445 for backup to cloud
- TCP port 6109 for Active Protection
- TCP port 31009 for Active Protection Manager
Acronis Cyber Backup 12.5 cloud deployment, Acronis Backup 12 cloud deployment
- TCP ports 443 and 8443 for accessing the Cyber Protection console, registering the agents, downloading the certificates, user authorization, and downloading files from the cloud storage.
- TCP ports 5905, 7770...7800 for communication between components
- TCP port 9850 for command line (acrocmd, acropsh) commands
- TCP ports 445 and 25001 for remote installation
- TCP ports 443 and 902 to access the vCenter Server and ESX(i) hosts
- TCP port 44445 for data transfer during backup and recovery
- TCP ports 443 and 44445 for backup to cloud
- TCP port 6109 for Active Protection
- TCP 3333 for VM replication
Starting with version 9.0, the following local ports are open for inbound communication on the machine where you plan to install the Cyber Protection agent:
127.0.0.1:9999
127.0.0.1:43234
127.0.0.1:9850
You don't need to open them in firewall.
See also Acronis Cyber Protect Cloud: access ports and hostnames
Acronis Backup (Advanced) 11.7/11.5 uses the following ports:
- TCP port 9876 for installation (local and remote) and for communication between components
- TCP ports 445 and 25001 for remote installation
- TCP ports 443 and 902 to access the vCenter Server and ESX(i) hosts
- TCP ports 443, 44445, and 55556 for backup to cloud
Acronis Snap Deploy uses the following IP Addresses:
- IPv4 multicast address: 239.255.219.45
- IPv6 multicast address: FF05::fAA5:741E
Acronis PXE Server of Acronis Snap Deploy uses the following ports and IP address:
- UDP ports 67, 68, 69
- Broadcast address: 255.255.255.255
Acronis Backup & Recovery (including Acronis License Server) uses the following ports:
- TCP port 9876
- TCP port 25001 for remote installation
Components of Acronis True Image 9.1/Echo, Acronis Recovery for MS SQL Server, and Acronis Recovery for Microsoft Exchange use the following ports for remote operation:
- UDP port: 9876
- TCP port: 9876, if busy, choose at random
- Acronis Management Console UDP port: 9877, if busy, choose at random
For the full list of remote installation prerequisites refer to the user guide of the respective product.
Do not stop Windows Firewall service on Windows Vista/7/8/10/2008/2008 R2/2012/2012 R2. You can turn the firewall features off by using the Group Policy settings described in this Microsoft TechNet article.
FTP-server must allow passive mode for file transfers. It is recommended that you change the source computer Firewall settings to open ports 20 and 21 for both TCP and UDP protocols and disable the Routing and Remote Access Windows service.
See also Acronis Snap Deploy Network Connections during Image Deployment.