Before we start, VBR needs to be able to connect to any Windows servers via the ADMIN$ share, and the default is for the Windows firewall to block it
This is needed for Windows Proxies, as of 13.0.1 in November 2025, the Linux proxies cannot do application aware processing on Windows servers, so a Windows proxy is required
Search for and open the Windows defender Firewall With Advanced Security
Right click Inbound Rules and click New Rule
Select Port and click Next
Select TCP and enter the ports
135,137-139,445
And click Next
Make sure you have Allow The Connection selected and click Next
Apply this to all and click Next
Name it, including TCP and click Finish
Right click the rule and click Properties
Click Scope, and under Remote IP addresses check These IP Addresses and click Add
Add the IP address of VBR and all proxies, if you have VBR HA, add both VBR server and the VIP, when we set them up later we can come back and edit the GPO, then click ok
And click ok again
Repeat for a new rule but selecting UDP instead of TCP
It should then look like this
The full guide can be found here
https://blog.leaha.co.uk/2025/12/23/veeam-data-platform-13-ultimate-deployment-guide/