You need two different address groups.
1. Your source hosts (that are being backed up)
2. Your destination hosts (the commvault unit)
If you have the SRC and DST the same IP group, then it would be looking for a traffic flow from commvault to commvault.
You are right on the money for the port range though, that is what I have to do with Exchange flows.