Feature Requirements
Some NAKIVO Backup & Replication features require certain conditions in order to function properly. To learn about the limitations of NAKIVO Backup & Replication, refer to the Feature Limitations section of the latest Release Notes. The requirements for product features are listed below.
- Hot Add
- File Recovery
- File Share Backup
- Object Recovery and Log Truncation for Microsoft Exchange Server
- Object Recovery and Log Truncation for Microsoft SQL Server
- Object Recovery for Microsoft Active Directory
- Site Recovery
- Physical Machine Backup And Recovery
- Cross-Platform Recovery
- App-Aware Mode
- Encrypted Backup Repository
- Direct Connect
- Native Tape Support
- Backup Immutability
- VM Limitation for Multi-Tenancy
- Monitoring
- Permanent VM Agent
- External Database
- Generic S3-Compatible Object Storage
- Merge Jobs
- MSP Console
Hot Add
In order for the Hot Add feature to work for VMware VM backup, replication, and recovery, the following requirements must be met:
- The Transporter that will be reading or writing data from/to the VM disks should run on a VM.
- The Transporter VM should:
- Be available in the product Inventory,
- Run on a host that has access to the datastore(s) with the VM disks, Run in the same datacenter as the VM that is to be processed.
A single SCSI controller on the VM hosting NAKIVO Backup & Replication can support up to 15 disks including the system disk of the VM with NAKIVO Backup & Replication and mounted disks of the Backup Repository. To process VMs with a total number of disks that is larger than that limit, it is necessary to install one or more additional SCSI controllers.
File Recovery
Recovered files can be downloaded or sent via email. They can also be recovered to a server or file share. Before using the feature, make sure the following packages and services are installed/running either on the (proxy) transporter or target server depending on the selected recovery method:
Microsoft Windows
-
Net Security package should be installed
-
Microsoft iSCSI Initiator service should be installed and running
-
net.exe
utility should be installed -
SMB 2 / CIFS File Sharing Support feature should be turned on
-
PowerShell should be version 2.0 or above
-
PowerShell ISE should be available
Ubuntu Linux
-
openssh-server
package should be installed -
sshd
service should be running -
parted
utility should be installed -
fdisk
utility should be installed -
open-iscsi
package should be installed -
iscsiadm
utility should be installed -
iscsid
utility should be installed -
iscsid
service should be running (for v16.04 and v18.04) -
iscsi_tcp
module should be installed -
SElinux
service should be disabled
SUSE Linux Enterprise Server (SLES)
-
openssh-server
package should be installed -
sshd
service should be running -
parted
utility should be installed -
fdisk
utility should be installed -
open-iscsi
package should be installed -
iscsiadm
utility should be installed -
iscsid
utility should be installed -
iscsid
service should be running (for v12) -
iscsi_tcp
module should be installed -
SElinux
service should be disabled
Red Hat Enterprise Linux (RHEL)
-
openssh-server
package should be installed -
sshd
service should be running -
parted
utility should be installed -
fdisk
utility should be installed -
iscsi-initiator
package should be installed -
iscsiadm
utility should be installed -
iscsid
utility should be installed -
iscsid
service should be running -
iscsi_tcp
module should be installed -
SElinux
service should be disabled
Note
File recovery is not supported for 4K sector size drives and datastores. Refer to How to Check Drive and Datastore Sector Size for more information.
Below are the requirements which must be met for each recovery method.
Downloading Files to Browser or Sending Files via Email
- The following file systems are supported:
If the Transporter assigned to the backup repository is installed on Windows:NTFS
FAT32
ReFS
NTFS
FAT32
EXT2
EXT3
EXT4
XFS
SwapLinux
-
For the ReiserFS file system, it is necessary to install the
linux-image-extra-virtual
package:apt-get -y install linux-image-extra-virtual
for Ubuntu. -
Linux VMs where Transporter is deployed should have the
lvm2
package installed to allow mounting LVM volumes. -
The
ntfs-3g
package should be installed along with Transporter on Linux to allow recognizing NTFS partitions.
Recovering Files to Server
To recover files to a server, make sure you meet the following requirements:
Supported OS
- Windows
-
Windows Server 2022 (21H2) (x64)
-
Windows Server 20H2 (20H2) (x64)
-
Microsoft Windows Server 2022 (x64)
-
Microsoft Windows Server 2019 Standard (x64)
-
Microsoft Windows Server 2016 Standard (x64)
-
Microsoft Windows Server 2012 R2 Standard (x64)
-
Microsoft Windows Server 2012 Standard (x64)
-
Microsoft Windows 11 (21H2) (x64)
-
Microsoft Windows 11 (x64)
-
Windows 10 Enterprise (20H2 / 21H1 / 21H2) (x64)
-
Microsoft Windows 10 Home (x64)
-
Microsoft Windows 10 Professional (x64)
-
Microsoft Windows 8 Professional (x64)
-
- Linux
Ubuntu 22.04 Server LTS (x64)
Ubuntu 20.04 Server (x64)
Ubuntu 18.04 Server (x64)
Ubuntu 16.04 Server (x64)
SUSE Linux Enterprise Server 15 SP4 (x64)
SUSE Linux Enterprise Server 15 SP3 (x64)
SUSE Linux Enterprise Server 15 SP2 (x64)
SUSE Linux Enterprise Server 15 SP1 (x64)
SUSE Linux Enterprise Server 12 SP5 (x64)
SUSE Linux Enterprise Server 12 SP4 (x64)
SUSE Linux Enterprise Server 12 SP3 (x64)
Red Hat Enterprise Linux 9.1 (x64)
Red Hat Enterprise Linux 9.0 (x64)
Red Hat Enterprise Linux 8.6 (x64)
Red Hat Enterprise Linux 8.5 (x64)
Red Hat Enterprise Linux 8.4 (x64)
Red Hat Enterprise Linux 8.3 (x64)
Red Hat Enterprise Linux 8.2 (x64)
Red Hat Enterprise Linux 8.1 (x64)
Red Hat Enterprise Linux 8.0 (x64)
Red Hat Enterprise Linux 7.9 (x64)
Red Hat Enterprise Linux 7.8 (x64)
Red Hat Enterprise Linux 7.7 (x64)
Red Hat Enterprise Linux 7.6 (x64)
Red Hat Enterprise Linux 7.5 (x64)
Red Hat Enterprise Linux 7.4 (x64)
CentOS Stream 9 (x64)
CentOS Stream 8 (x64)
CentOS Linux 8.4 (x64)
CentOS Linux 8.3 (x64)
CentOS Linux 8.2 (x64)
CentOS Linux 8.1 (x64)
CentOS Linux 8.0 (x64)
CentOS Linux 7.9 (x64)
CentOS Linux 7.8 (x64)
CentOS Linux 7.7 (x64)
CentOS Linux 7.6 (x64)
CentOS Linux 7.5 (x64)
CentOS Linux 7.4 (x64)
CentOS Linux 7.3 (x64)
CentOS Linux 7.2 (x64)
CentOS Linux 7.1 (x64)
CentOS Linux 7.0 (x64)
TCP Ports
Connection to the following TCP ports should be allowed by the firewall of the target system:
-
22 – Used by SSH for secure logins, file transfers (scp, sftp) and port forwarding.
-
9445 – Used by NAKIVO Backup & Replication to communicate with the VM.
-
10000 – Used by NAKIVO Backup & Replication for iSCSI communication.
Note
ICMP Ping traffic should be allowed by the firewall of the target system.
Permissions
The following permissions for Microsoft Windows VMs should be granted:
-
Users should be members of a local Administrators group.
-
Users should have access to default administrative shares.
-
Users should have permissions to access the corresponding folder\file.
-
Users should have executive permissions for running some utilities, for example,
net.exe
utility. -
User Account Control (UAC) remote restrictions should be disabled for some Microsoft Windows versions.
-
Users should have permissions to "Log on as a batch job".
The following permissions and settings should be set up for Linux VMs:
-
Users should belong to the
sudo
group to complete recovering files to server successfully. -
Users should have executive permissions for running some utilities, for example, /sbin/parted, /sbin/fdisk, /sbin /iscsiadm, /sbin/iscsid.
-
PasswordAuthentication should be set to "yes".
-
Provide special permissions to NAKIVO recovery service. For more details, refer to Required Permissions for Linux Recovery Server.
Recovering Files to File Share
The following file share types are supported:
- NFS
- CIFS
The target share must have one of the following protocols installed:
-
NFS 3.x
-
SMB 2.x
-
SMB 3.x
To recover file/folder attributes or encrypted files, the machine on which the Transporter is installed, recovery share, and backed up machine must have the same OS capabilities and file system type. To avoid potential issues while conducting file recovery, ensure the following:
-
If the target is an NFS file share, check that nfs-utils is installed.
-
If the target is a CIFS share, add a localhost domain to the user credentials (e.g. localhost\Administrator).
File Share Backup
The following requirements must be met to use the feature:
-
File shares must be located on a NAS, Windows Server, or Linux Server that supports the NFS or CIFS/SMB protocol.
-
Read permission is required to back up the file shares.
-
Read/write permission is required to restore to a file share.
-
To use NFS file shares with Windows, NFS client feature must be enabled.
-
File shares with the following protocols are supported:
-
NFS 3.x
-
SMB 2.x
-
SMB 3.x
-
-
The following operating systems do not support any NFS Server versions:
-
Windows 7
-
Windows 8.1
-
Windows 10
-
Object Recovery and Log Truncation for Microsoft Exchange
To successfully perform object recovery and log truncation for Microsoft Exchange, make sure you meet the following requirements:
Supported Microsoft Exchange versions
NAKIVO Backup & Replication supports the following versions of Microsoft Exchange for object recovery and log truncation:
-
Microsoft Exchange 2019
-
Microsoft Exchange 2016
-
Microsoft Exchange 2013
Permissions
The following requirements should be met for log truncation:
-
Selected users should have permissions to "Log on as a batch job".
-
Active Directory Module For Windows PowerShell must be installed.
-
The VM must be accessible over network.
-
The following user permissions should be provided:
-
If NAKIVO Backup & Replication uses the administrator user account, it should belong to the following groups:
-
Administrators
-
Domain Users
-
Organization Management
-
-
If NAKIVO Backup & Replication uses accounts other than the
administrator
user account:-
The user should belong to the following groups:
-
Administrators
-
Domain Users
-
Organizational Management
-
-
The user should have the Full control permission granted for the folder in which the Exchange database is located.
-
-
Services and Settings
NAKIVO Backup & Replication requires PowerShell v2 or later to be available on the Microsoft Exchange machine.
-
VMware VM must be running on VMware ESXi 5.0 and later.
-
VMware Tools or Hyper-V Integration Services must be running on VMware or Hyper-V VMs correspondingly.
Object Recovery and Log Truncation for Microsoft SQL Server
To successfully perform object recovery and log truncation for a Microsoft SQL Server, you must meet general requirements as well as requirements for object recovery and log truncation.
General Requirements
To successfully perform object recovery and log truncation for a Microsoft SQL Server, make sure you meet the following general requirements:
Supported Versions of Microsoft SQL Server
NAKIVO Backup & Replication supports the following versions of Microsoft SQL Server for object recovery and log truncation:
-
Microsoft SQL Server 2022
-
Microsoft SQL Server 2019
-
Microsoft SQL Server 2017
-
Microsoft SQL Server 2016
-
Microsoft SQL Server 2014
-
Microsoft SQL Server 2012
Permissions
-
A user logging in to Microsoft SQL Server must have a
sysadmin
role. -
The user running Microsoft SQL Service should have permissions to "Log on as a batch job".
Services and Settings
-
NAKIVO Backup & Replication requires PowerShell v2 or later.
-
VMware Tools or Hyper-V Integration Services must be running on VMware or Hyper-V VMs correspondingly.
-
sqlcmd
utility must be installed on the machine running Microsoft SQL server. -
Ports 137-139 must be opened for
cifs
. -
The SMB 2 protocol should be enabled.
Requirements for Microsoft SQL Server Object Recovery
-
The user running Microsoft SQL service must have executive permissions to the
Data
folder and all other folders in which the databases are located. -
If "Rename recovered item if such item exists" option is selected during the recovery, NAKIVO Backup & Replication skips keys, constraints, indexes, and statistical properties when recovering a table to an original location.
-
If "Overwrite the original item if such item exists" option is chosen, all the above properties are preserved. Tables that contain a foreign key cannot be recovered with this option.
-
Full administrative permissions are required.
-
Default administrative shares must be enabled.
-
The "File server" role must be enabled.
-
Ports 445 and 9445 must be opened on the instance.
Requirements for Microsoft SQL Server Log Truncation
-
VMware VM must be running on VMware ESXi 5.0 and later.
-
System databases are skipped during the log truncation.
-
Databases with the "Simple" recovery model are skipped during the log truncation.
-
A database must be in the "online" state.
-
The SMB 2 protocol should be enabled.
Object Recovery for Microsoft Active Directory
Supported Versions
NAKIVO Backup & Replication supports the following versions of Microsoft Active Directory for objects recovery:
-
Windows Server 2022 (21H2)
-
Windows Server 20H2 (20H2)
-
Windows Server 2019
-
Windows Server 2016
-
Windows Server 2012 R2
-
Windows Server 2012
Requirements for Object Recovery for Microsoft Active Directory
-
The ISCI Initiator service must be running on the recovery server.
-
The vc_redist.x86.exe (v.2015) file must be installed on the recovery server.
-
Active Directory Web Services must be running.
-
Port 5000 must not be blocked by other services and must be opened in the firewall of AD.
-
Active Directory Module For Windows PowerShell must be installed.
Site Recovery
To successfully perform a site recovery, make sure you meet the following requirements:
Run Script Action
The list of supported operating systems where the Run Script action may be run can be found in the Recovering Files to Server subsection above.
TCP ports
Connection to the following TCP ports should be allowed by the firewall of the target system:
-
22 – Used by SSH for secure logins, file transfers (scp, sftp) and port forwarding.
-
9445 – Used by NAKIVO Backup & Replication to communicate with the VM.
Note
ICMP ping traffic should be allowed by the firewall of the target system.
Required permissions for Microsoft Windows VMs:
-
Users should be members of a local Administrators group.
-
Users should have access to default administrative shares.
-
Users should have permissions to access the corresponding folder/file.
-
User Account Control (UAC) remote restrictions should be disabled for some Microsoft Windows versions.
-
Users should have permissions to "Log on as a batch job".
Services and Settings
-
For Windows source VMs, the SMB 2 / CIFS File Sharing Support feature should be turned on.
-
For Linux VMs, users should belong to the
sudo
group. -
VMware Tools or Hyper-V Integration Services must be running on VMware or Hyper-V VMs, respectively.
Physical Machine Backup And Recovery
The following requirement must be met:
-
$ExecutionContext.SessionState.LanguageMode in PowerShell must be set to FullLanguage.
Supported Operating Systems for Physical Machine Recovery
Refer to the Supported Platforms page for a full list of supported Windows and Linux operating systems.
Supported Recovery Destinations
- VMware vSphere version 6.7 or later
Cross-Platform Recovery
The following scenarios are supported if a VM is exported from backup and imported into a different hypervisor:
Target Platforms | |||
Source Platforms | VMware vSphere 7 | Microsoft Hyper-V 2016/2019/20H1/2022 | Nutanix AHV 5.10/5.15 |
VMware vSphere 7 |
|
|
|
Microsoft Hyper-V 2016/2019/20H1/2022 |
|
|
|
Physical Machines |
|
|
|
* To run a VM with RHEL 7 on Microsoft Hyper-V 2016/2019, the following option must be configured in grub boot parameters:
ata_piix.prefer_ms_hyperv=0
As an alternative, the source machine can be pre-configured with the command below:
mkinitrd -f -v --with=hid-hyperv --with=hv_utils --with=hv_vmbus --with=hv_storvsc --with=hv_netvsc /boot/initramfs-$(uname -r).img $(uname -r)
App-aware Mode
To enable application awareness for source objects, make sure the following requirements are met:
VMware
- VMware Tools should be installed, running, and up to date on all source VMs.
Microsoft Hyper-V
-
Target system must be in the running state and custom OS quiescing must be enabled for it.
-
Only the following target systems are supported for custom OS quiescing:
-
Windows Server 2012 Standard (x64)
-
Windows Server 2012 R2 Standard (x64)
-
Windows Server 2019 Standard (x64)
-
-
Connection between the product and target system should be established.
-
Refer to the Knowledge Base article for more details.
-
Target system must be in the running state and custom OS quiescing must be enabled for it.
-
Only the following target systems are supported for custom OS quiescing:
-
Windows Server 2012 Standard (x64)
-
Windows Server 2012 R2 Standard (x64)
-
Windows Server 2019 Standard (x64)
-
-
Connection between the product and target system should be established.
-
Refer to the Knowledge Base article for more details.
Nutanix AHV
-
Nutanix Guest Tools should be installed and running on all source VMs.
-
The necessary permissions should be granted. Refer to the Knowledge Base article for more details.
Amazon EC2
To enable application awareness for AWS EC2 instances running on Windows, make sure you meet the following requirements:
Supported Operating Systems
-
Windows Server 2019 Standard (x64)
-
Windows Server 2016 Standard (x64)
-
Windows Server 2012 R2 Standard (x64)
-
Windows Server 2012 Standard (x64)
Requirements for Windows-based Amazon EC2 Instances
Default administrative shares in Windows-based AWS EC2 Instances should be enabled in order for application awareness to work.
Requirements for Security Groups of Source EC2 Instances
Ports 445, and 9445, and 9446 should be added to the security group of source AWS EC2 Instances to be backed up or replicated.
Requirements for the Director Machine
If the Director is installed on an Amazon EC2 Instance, the following requirements should be met:
-
OS firewall should allow access to the TCP port 9446 on the machine where the Director is installed.
-
The security group of the Instance where the Director is installed should allow access to TCP ports 445. 9445, and 9446.
Physical Machines
-
Transporter should be available and configured on the source machine.
-
All source objects of the job should be running OS that is supported for OS quiescing.
-
Microsoft VSS should be available and configured on Windows-based source objects of the job.
-
Custom OS quiescing should be enabled on Linux-based source objects of the job.
-
The physical source machine should contain supported volumes.
Encrypted Backup Repository
To enable encryption, the following requirements should be met:
-
The Transporter assigned to the encrypted backup repository must be installed on Ubuntu, SLES or RHEL. Currently, Transporters installed on other Linux versions, Windows, and NAS do not support this feature.
-
For certain SLES and RHEL versions, only full device/partition encryption is available. Learn more.
Direct Connect
The following platform is supported:
-
VMware vSphere
Note
The free version of VMware vSphere is not supported.
Requirements
Direct connect supports the following Transporter operating systems:
-
Windows
-
Linux
Direct connect supports the following Transporter types:
-
Onboard transporter
-
Installed service
-
VMware vSphere appliance
The following deployment scenarios are supported:
-
Director and Transporter(s) installed at the MSP's site and a single Proxy Transporter installed at each client site.
-
Primary repository at client site (managed by client's Proxy Transporter) and a secondary repository at the MSP's site.
Additionally, the following requirements must be met:
-
A static external IP address is required at the remote environment.
-
A single TCP port must be exposed to the Internet at the remote environment.
-
Port forwarding must be configured at the remote environment to forward requests from this external port to the deployed Transporter.
Supported Features
Direct connect supports the following product features:
-
Inventory discovery/refresh
-
Repository creation/management
-
VM backup
-
VM replication
-
Full VM recovery
-
VM verification
-
Flash VM boot (from client repository to client infrastructure/from MSP repository to MSP infrastructure)
-
Backup copy
-
File recovery to browser
-
Auto update
Native Tape Support
NAKIVO Backup & Replication supports tape environments with the following configurations:
-
Robotic tape libraries and standalone devices of LTO3 and later generations.
-
AWS Storage Gateway service with a Tape Gateway that functions as a Virtual Tape Library (VTL).
-
Only VTLs connected to Linux are currently supported.
-
The gateway VM deployed on-premises needs to have the following minimum resources:
-
CPU: x86-64, 4+ cores
-
RAM: 16+ GB
-
Free Space: 80 GB
-
-
According to the requirements for Amazon EC2 instances, when deploying the gateway on Amazon EC2, the instance size should be at least
2xlarge
for the compute-optimized instance family. -
The instance type should be c4 or c5 instance types. The 2xlarge instance size or higher can be chosen to meet the required RAM requirements.
-
All physical tape cartridges must have barcodes.
-
Installation is supported on all Windows OS and Linux OS, as listed on the Supported Platforms page.
-
Installation on NAS OS is not supported.
-
The "mtx" and "lsscsi" utilities need to be installed on the Linux transporter server in order to detect the tape library changer.
Backup Immutability
To make backups immutable in Backup Repositories located in Amazon S3, generic S3-compatible storage (Beta), or Wasabi, the following options must be enabled for the buckets where the repository is located:
-
Object Lock
-
Versioning
To make backups immutable in Backup Repositories located in Backblaze B2 Cloud Storage, File Lock (also known as Object Lock) must be enabled.
To make backups immutable in Backup Repositories located in Azure Blob Storage, the following options must be selected for the Azure storage account or container:
-
Enable version-level immutability support
-
Enable versioning for blobs
Notes
-
Disable Object Lock retention mode and retention period for the Amazon S3 or Wasabi bucket where the repository is located, as retention settings are set in NAKIVO Backup & Replication during job creation.
-
Backing up to Wasabi with Object Lock enabled may take longer compared to when Object Lock is disabled.
-
Backup Immutability is not supported for encrypted Backup Repositories.
To enable immutability for Local Folder type of Backup Repository, the following conditions must be met:
-
Target file system must support extended attributes modified by chattr and setfattr commands.
-
The Backup Repository type must be Local Folder.
-
The Backup Repository must have Store backups in separate files selected.
For the feature to be available on FreeNAS/TrueNAS, the following 2 settings must be configured:
-
allow_chflags = yes
-
seclevel = 0
Note
Only Linux OS and NAS OS specified in system requirements are supported.
VM Limitation for Multi-Tenancy
The feature is only available if a license with Socket limit mode is installed.
The following hypervisors are supported:
-
VMware vSphere
-
VMware Cloud Director
-
Microsoft Hyper-V
-
Nutanix AHV
Monitoring
For the feature to function correctly, the following conditions must be met:
-
For NAKIVO Backup & Replication to display disk usage, VMware Tools must be running in a VM.
-
VM must be powered on for the monitoring to be available.
The feature supports the following platforms:
-
Paid versions of VMware vCenter Server
-
Paid versions of VMware ESXi host
The following types of items are supported:
-
VMware vSphere host
-
VMware vSphere datastore
-
VMware vSphere VM
The full list of supported versions of vCenter and ESXi can be found here.
Permanent VM Agent
VM agents are available for the following platforms:
-
VMware vSphere
-
Microsoft Hyper-V
-
Amazon EC2
-
Nutanix AHV
VM agents support the following features:
-
OS quiescing
-
File recovery to source
VM agents can be used in the Windows and Linux operating systems listed in this section of Deployment Requirements.
External Database
The following external databases are supported:
-
PostgreSQL v10-14
Make sure to adhere to the following system requirements for the machine housing external database:
-
CPU: x86-64, 4+ cores
-
RAM: 4-8+ GB
-
Free Space: 50 GB. SSD is highly recommended.
-
OS: Windows and Linux operating systems.
Note
The external database can be created on either the physical machine, VM, or stored in a container.
Generic S3-Compatible Object Storage (Beta)
The following vendors for generic S3-compatible object storage are currently supported:
-
MinIO
-
Ceph
-
Cloudian
-
C2 Object Storage
-
SeaGate LyveCloud
Notes
-
This list only contains vendors that were specifically tested and will be updated as NAKIVO continues to test more vendors.
-
Immutability is supported only if object lock and S3 versioning are enabled on the vendor side and are supported by vendor APIs.
-
Some S3-compatible vendors not listed above may be supported if they use the applicable APIs. The list of APIs used by NAKIVO Backup & Replication for generic S3-compatible object storage (Beta) functionality can be found here.
Merge Jobs
The feature supports the following types of jobs:
-
Backup
-
Backup copy
-
Replication
Job merging can be performed in the following cases:
-
Both source and target jobs are of the same type and platform.
-
The source job is in an idle state.
Job merging cannot be performed in the following cases:
-
One of the selected jobs is a backup copy job with the destination set to tape.
-
The target job uses the Policies view.
-
The Transporter selection settings of the target job cannot be applied to the source job objects.
-
Both source and target jobs contain or reference the same workload.
MSP Console
To use the MSP Console feature, the managed service provider (MSP) needs to configure the following TCP ports:
-
MSP Director port: This is the TCP port used by the Director for the MSP's instance of NAKIVO Backup & Replication. By default, this is TCP port 4443. The MSP must provide a remote tenant with their Director port number during configuration. The remote tenant needs to enter this port number when adding the MSP.
-
Listening port: Additionally, the MSP must have a port open for listening to the remote tenant. By default, TCP port 6702 is used. The MSP may change the listening port used by changing the system.msp.console.listening.port parameter in Expert settings.