Port 13724Symantec vnetd

Symantec Network Utility vnetd, previously known as VERITAS NetBackup, is a dedicated communication service utilized in Symantec backup and recovery solutions. It facilitates remote management and data transfers between backup clients and servers, supporting backup operations across distributed enterprise environments..

transport
tcp · udp

2 transports registered

in transit
cleartext

payload readable on path

assignment
official

registered with iana

risk
4/10

caution

lookups
7,622

rank 671 of 993 · top 68%

Technical Details

what runs on :13724
  • Overview: Port 13724 is primarily associated with Symantec NetBackup’s vnetd service. This service acts as a multiplexing daemon that manages connections between client machines and backup servers, orchestrating backup jobs, restore processes, and catalog exchanges.

  • Functionality: vnetd assists in the negotiation and establishment of data connections, dynamically allocating additional ports necessary for transferring backup data. Because it supports both TCP and UDP protocols, it can negotiate session setup, heartbeat signaling, and data exchange efficiently across various environments and firewall configurations.

  • Integration: This port is integral when NetBackup components communicate across subnets or between media servers and master servers. The service helps in overcoming network address translation (NAT) and firewall complexities by serving as a centralized communication point. It supports encrypted channels if configured but by default is unencrypted.

Security Information

exposure of :13724

risk score

4/ 10caution

worth attention. how exposed you are depends on configuration — don't leave it reachable from the internet without a reason.

network services averages 3.9 across 604 ports — this one sits 0.1 above.

in transit

cleartext

credentials and payloads are readable by anyone on path

assignment

official

registered with iana for this service — scanners fingerprint it by number

reachable over

tcp · udp

udp is connectionless — source addresses are trivially spoofed and it is a reflection favourite

security overview

  • Common Vulnerabilities:

    • Unauthorized access if vnetd is left exposed without access controls
    • Misconfigurations leading to data interception since default communication is unencrypted
    • Potential exploitation of unpatched vulnerabilities in older Symantec NetBackup versions
    • Use in reconnaissance activities by attackers scanning for backup services
  • Common Mitigations:

    • Restrict network access using firewalls or access control lists, permitting only known backup servers and clients
    • Enable encryption options within NetBackup to secure traffic
    • Regularly update and patch all Symantec software components
    • Monitor network activities on port 13724 for anomalies
    • Segregate backup infrastructure within a dedicated, secure network segment

the 8 most looked-up other ports in network services — 604 ports carry that label.

risk mix of the 8 listed

  • caution100%

0 of 8 encrypted