Ports open FROM Server with Agent to backup server?

[EviLin]

Hello,

We are about to deploy Veeam agents on around 100 VMs in Azure.

What we stumbled upon:

In this table:
https://helpcenter.veeam.com/docs/backu ... ml?ver=120

It says that we should open FROM the server (agent) to the backup server on port:
10005, 10001 and 2500-3300

We got some servers in DMZ etc., its against normal procedure to open FROM DMZ to inside (VBR server)
Why is this neccesary?

And what is the exact purpose of 10005 and 10001 port?