Which port on the Avamar server does the client connect to when performing a backup with encryption enabled?

During a backup or restore operation, the Avamar client process (avtar) must connect to the gsan (Global SAN) service running on the Avamar data nodes to transfer data. The standard TCP port used for this client-to-server data transfer is 29000. All modern Avamar client-to-server communication over this port is encrypted by default using Transport Layer Security (TLS) to ensure data confidentiality and integrity while in transit.

A. 27000: This port is used by the Avamar Administrator GUI to connect to the Management Console Server (MCS) for system administration.
B. 28001: This is the default listener port on the Avamar client for the avagent service, which the server uses to initiate on-demand backups.
C. 28002: This is the secure port used by clients to register and communicate with the MCS for activation and policy updates, not for data transfer.

1. Dell Avamar 19.4 Security Configuration Guide, Page 16, Table 2 "Avamar server firewall ports". The table lists TCP Port 29000 with the description "Client backup/restore" for connections from the Client to the Storage Node (gsan).