Setting default backup network and security options

You can specify a network to be used as the default for every Backup Exec job. Before configuring the feature, test for network connectivity between the media server and the remote computers.


The remote computers that you want to back up must have the most current version of Backup Exec Remote Agent installed.

You can also set default security options for Backup Exec jobs. You can select a default encryption type or key for your backup jobs. If you use Symantec Endpoint Protection 11.0 or later, you can configure it to prompt Backup Exec to back up data when global threats arise.

The backup settings you select are set as the default for all new backup jobs and templates you create. You can manually change these settings when you create specific jobs or templates.

To set the default backup network and security options

  1. On the Tools menu, click Options.

  2. On the Properties pane, under Job Defaults, click Network and Security.

  3. Select the appropriate options as follows:

    Enable selection of user shares

    Select this option to enable selection of Windows user shares.

    Enable remote agent TCP dynamic port range

    Select this option if you want to allow remote agents to use a range of ports for communications, and then enter the port range. If the first port that Backup Exec attempts to use is not available, communications will be attempted through one of the other ports in the range. If none of the ports in the range are available, Backup Exec will use any available dynamic port. Default port ranges are 1025 to 65535. Symantec recommends using a range of 25 allocated ports for the remote systems if using Backup Exec with a firewall.

    See Using Backup Exec with firewalls.


    Select the name of the network interface card that connects the media server to the network you want to use for the backup network. The list includes all available network interface cards on the media server.

    Interface details

    Displays the Media Access Control (MAC) address, Adapter type, Description, IP addresses, and subnet prefixes of the network interface you selected for the backup network.


    Select the protocol you want to use.

    The options are as follows:

    • Use any available protocol

    • Use IPv4

    • Use IPv6


    Displays the 32-bit number that determines the subnet to which the network interface card belongs.

    Allow use of any available network interface, protocol, or subnet for remote agents not bound to the above network interface, protocol, or subnet

    If a remote system that you selected for backup or restore is not part of the specified backup network, select this check box to ensure that the data from the remote system is backed up or restored over any available network.

    If you do not select this check box and you selected data from a remote system that is not part of the specified backup network, the job fails because Backup Exec cannot back up or restore the data from the remote system.

    Use a custom port to receive operation requests from the remote system

    Check Use a custom port to receive operation requests from the remote system to change the port used for communications between this computer and the remote computer for both DBA- and media server-initiated operations. By default, port 5633 is used.

    If you change the port number on the remote Windows or Linux computer, you must also change it on the media server, and then restart the Backup Exec Job Engine service on the media server.

    See What to do when Oracle instance information changes.

    Encryption type

    Select the type of encryption you want to use, if any.

    See About encryption.

    Encryption key

    Select the default encryption key you want to use.

    Manage keys

    Click Manage keys to create a new encryption key or delete an existing encryption key.

    Run backup immediately when an elevated Symantec ThreatCon level is reached

    Select whether you want to run automatic backups when the Symantec ThreatCon reaches the level you specify in the Symantec ThreatCon level field. You must have Symantec Endpoint Protection 11.0 or later installed on the same computer as Backup Exec to use this feature.

    Symantec ThreatCon level

    Select the ThreatCon level at which you want automatic backups to run.

    You can find more information about Symantec ThreatCon levels at the following URL:

More Information

Changing the backup network and security options for a job

Specifying the restore network

About encryption

Encryption keys

About using Backup Exec with Symantec Endpoint Protection

Viewing the Symantec Endpoint Protection Security Summary