No updates from gateway servers

No data come from the gateway servers. The Svc.VeeamGateSvc.log on the Gateway server (default path C:\ProgramData\Veeam\Backup) contains the following entry:
 

Failed to establish target connection to endpoint: [xxx.xxx.xxx.xxx:9999]

where xxx.xxx.xxx.xxx points to the Veeam Managed Backup Portal server.

The gateway server is unable to reach Veeam Managed Backup Portal server.

Verify the following:

• ​port TCP:9999 is open on the Veeam Managed Backup Portal server;
• you are able to telnet to TCP:9999 on the Veeam Managed Backup Portal server.

If you are unable to telnet to TCP:9999 on the VMBP server from the Gateway, follow these steps to re-create the firewall rule.

1. Open Windows Firewall advanced settings on the Veeam Managed Backup Portal server.
2. Open Inbound Rules and locate rule named Veeam Management Agent port (In). Disable or delete it.
3. Choose to create New Rule > Custom on the Rule Type page.
4. On the Program page, select This program path and specify the location of Veeam Management Agent (the default path is C:\Program Files\Veeam\Managed Backup Portal\CommunicationAgent\Veeam.MBP.Agent.exe).
5. On the Protocols and Ports page, select Protocol type = TCP, Local port = Specific ports, 9999.
6. On the Scope, Action and Profile pages the defaults can be accepted.
7. Provide a descriptive name for the new rule and click Finish.

There is also another (less secure) approach to the rule creation.

1. Open Windows Firewall advanced settings on the Veeam Managed Backup Portal server.
2. Open Inbound Rules and locate rule named Veeam Management Agent port (In). Disable or delete it.
3. Choose to create New Rule > Port on the Rule Type page.
4. On the Protocols and Ports page, select Protocol type = TCP, Specific local ports = 9999.
5. On the Action and Profile pages the defaults can be accepted.
6. Provide a descriptive name for the new rule and click Finish.

If you have any questions, contact Veeam Support.