Skip to main content
kieserite
kieserite
New Member
January 22, 2019
Question

Help Opening Ports For Carbonite Backup

  • January 22, 2019
  • 1 reply
  • 7269 views

Hi I am new to the Fortigate. We use Carbonite backup and recently had some firmware and other updates done by a different company. After the updates were done, all of our Carbonite backups stopped. The Carbonite folks said that the following ports needed to be opened:

 

[ul]
  • 25 (SMTP)
  • 53 (DNS)
  • 80 (HTTP)
  • 443 (HTTPS)[/ul]

    Would someone be able to help walk me thru opening those ? I'm assuming that's what has changed, but open to any advice.

    Thanks very much!

      • 1 reply

      lobstercreed
      lobstercreed
      New Member
      January 22, 2019

      Hi Mark,

       

      Really need some more info to "walk you through it".  This is pretty basic firewall stuff though...

       

      I'm going to guess that they mean those ports are necessary outbound, so you'd want to look at whatever rules should match traffic from your Carbonite server to the Internet, and make sure the listed services are part of that rule's definition.  The appropriate NAT needs to be done of course as well.

       

      - Daniel

      rwpatterson
      rwpatterson
      New Member
      January 22, 2019

      Your best bet for that would be to get a list of destination IP addresses or subnets that Carbonite uses, and open those ports for all devices ONLY to the Carbonite hosts/subnets. This way any device you add to Carbonite backup would work without any further configuration inside the firewall. Carbonite support should (may) be able to give you that information.

      kieserite
      kieseriteAuthor
      New Member
      January 23, 2019

      I like this idea and I did find an article listing the endpoint addresses. They suggested using NSLookup to find the IP addresses. However they mention "You must enable all inbound and outbound traffic to *.azure-devices.net. There is no option to look up IP addresses for this endpoint." Can that be done w/o the IP?

       

      Here is the link:

       

       

      https://support.carbonite.com/articles/Server-Windows-Routing-Carbonite-Server-Backup-Network-Traffic

       

      Thanks so much, I really appreciate the help and your thoughts.

       

      Mark

       

      Terms & ConditionsAccessibility statement