The CFA is designed to function behind your firewall. To ensure its proper operation, the following ports should be open.

Between the CFA and Internet

Port No. TCP/UDP Direction Purpose
122 TCP CFA to Internet Technical support tunnel
443 TCP CFA to Internet Registration, licensing, software updates, reporting
2300 TCP CFA to Internet Replication

Between the CFA and the protected computers

In Windows, these ports open automatically during the agent installation.

Port No. TCP/UDP Direction Purpose
9101, 9102, 9103, 9104, 9105 TCP CFA to a client computer Basic CFA communication
9102 UDP Client computer to CFA CFA auto-discovery
139, 445 TCP Client computer to CFA DR image backups (CIFS/Samba ports)
135, 137, 138 UDP Client computer to CFA DR image backups (CIFS/Samba ports)

Between the CFA and VMware vCenter/ESXi

Port No. TCP/UDP Direction Purpose
443, 902 TCP CFA to VMware vCenter / ESXi host VMware backups

Between the CFA and an admin computer

Port No. TCP/UDP Direction Purpose
80, 443 TCP Admin computer to CFA WebGUI interface
22 TCP Admin computer to CFA SSH-based management (optional)