Before you protect HubSpot data, make sure your environment meets the following requirements for access nodes, network connectivity, and indexing.
- If you deploy your own access node in your internal network, IP allowlisting is typically not required. Follow the access node deployment documentation, and make sure the Commvault infrastructure can reach your access node.
- If you use a Commvault-managed access node, allowlist the access node IP address so it can connect to the HubSpot API endpoint (
api.hubspot.com). For information about IP allowlisting, see IP Allowlist for Controlling Access to the Command Center. - The Index Server runs on the MediaAgent that hosts the Primary Copy of the backup plan. Make sure MediaAgents have enough CPU and memory to handle indexing workloads.
- HubSpot API access must be enabled on your account. API access is not available on all free-tier plans.
- A HubSpot service key must be created in Development → Keys → Service Keys with all required scopes granted (see Configure HubSpot user and permissions).
Required ports
| Source | Destination | Port | Protocol | Purpose |
|---|---|---|---|---|
| Commvault access node | api.hubspot.com |
443 | HTTPS | HubSpot API calls (backup and restore) |
For Type B backup plans, storage I/O is routed through the Primary Copy MediaAgent, not directly from the access node to the storage bucket.
Note
This workload requires a backup plan whose Primary Copy MediaAgents have the CVS3Service package installed. For details, see Configure and validate backups for HubSpot.