Firewall rules need to be created on Windows assets to whitelist the local IP address of your physical or virtual Recovery Series appliance to ports 1743:1749 over TCP. A script is provided below for configuring Windows Defender Firewall.
If you use another firewall solution, create rules to only allow access from the local IP address of your physical or virtual Recovery Series appliance to ports 1743:1749 over TCP.
Script for Windows Defender Firewall:
Supported OS list
Windows Server 2008R2
Windows Server 2012
Windows Server 2012 R2
Windows Server 2016
Windows Server 2019
You must "Set-ExecutionPolicy Unrestricted" before running this script.
After running this script you can "Set-ExecutionPolicy Restricted"
This script works only on systems with installed Unitrends Agent software. If the Unitrends agent is not installed the script will immediately exit.
DenyRuleName = "Deny Unknown Unitrends Agent Inbound Traffic"
Blocks inbound TCP traffic into ports range from 1743 to 1749 for all IP addresses.
Only appliances which are protecting the windows asset will be able to connect to the Unitrends service ports
Windows Server 2016-2019 and Windows 10
Create allow inbound traffic to Unitrends applications from IPs in appliances.ini
Appliances.ini file will have this IP only after inventory sync
setup_unitrends_firewall_rules.ps1 -Action Protect
Windows Server 2008-2012 and Windows 8.1 or older
Create allow inbound traffic to Unitrends applications, the IP of the appliance must be defined, in this example the IP of the appliance is 192.168.1.121
setup_unitrends_firewall_rules.ps1 -Action Allow -Ip 192.168.1.121
Block all traffic to Unitrends ports - creates a deny rule for inbound TCP traffic to ports 1743-1745 (this will block all backups from running)
setup_unitrends_firewall_rules.ps1 -Action Block
Remove the block
setup_unitrends_firewall_rules.ps1 -Action Unblock
Remove any changes
setup_unitrends_firewall_rules.ps1 -Action Unprotect
Firewall rules need to be created on Linux assets to whitelist access to ports 1743:1749 to only the appliance protecting these assets.