I have both of these documents but they does not give me exact answer. For example in these documents there is  written that Data Domain uses port 2051 for replication and I opened this port. But the replication does not work and if I looked in logs then I noticed that Avamar wants to connect port 111 to start the replication. I will not want to open all these ports that are not related with replication.

Port Requirements for Allowing Access to Data Domain System Through a Firewall

https://support.emc.com/docu59576_Avamar_7.2_Product_Security_Guide.pdf?language=en_US

you realize that Avamar replicates to Avamar and Data Domain can only replicate to Data Domain ?

from Avamar 7.3 admin guide

https://support.emc.com/docu69617_Avamar-7.3-Administration-Guide.pdf?language=en_US

Yes I know that Avamar replicates to Avamar and Data Domain to Data Domain, but the Data Domain replication is initiated by Avamar server.

Ok, but the question still remains, what ports the replications uses?

according to the document it's the ports required by DDBoost , so should be 111 and possibly 2049.

I cannot write to my network team that I think these ports are needed. I need to know exactly what ports are needed. It is not thinkable that I write these ports and then after two days I add additional ports.

ok, open a ticket with support to get an official answer or run tcpdump and capture what ports are being used during Avamar client to DD backup.