TheSaffaGeek vRA Firewall ports

Source
Destination
Workstations
vRA Appliance (Load
Balancer)
vRA DEM
Orchestrator Server
Port
Protocol
Direction /Service
Description
443
TCP
Inbound
vRA Manager Service
(Load Balancer)
443
TCP
Inbound
vRA DEM Worker
Server
vRA Manager Service
(Load Balancer)
443
TCP
Inbound
vRA DEM Worker
Server
vCenter Server
443
TCP
Inbound
vRA DEM Worker
Server
vRA Application
Services
8443
TCP
Inbound
vRA DEM Worker
Server
Orchestrator Server
(Load Balancer)
8281
TCP
Inbound
vRA DEM Worker
Server
SCCM
443
TCP
Inbound /HTTPS
vRA DEM Worker
Server
vRA DEM Worker
Server
vRA Appliance
SCOM
5723
TCP
Outbound
SCOM
5724
TCP
Outbound
Domain Controllers
389
TCP
Bi-Directional
vRA Appliance
Domain Controllers
636
TCP
Bi-Directional
vRA Appliance
SMTP Server
25
TCP
Outbound
vRA Appliance
vRA Manager Service
(Load Balancer)
443
TCP
Inbound /HTTPS
End-User
Web Browser
connection to
vRA SelfService Portal
vRA DEM
Servers to the
vRA Server
Manager
Service
vRA DEM
Servers to the
vRA Server
Manager
Service
vRA DEM
Servers to
vCenter
Server
vRA DEM
Servers to
vRA
Application
Services
vRA DEM
Servers to
Orchestrator
Server
SCCM
integration
from VMware
vRA IaaS
DEM Worker
Server
SCOM Health
Service.
SCOM SDK
Service.
The lookup
port of your
LDAP
Authentication
server.
The lookup
port of your
secure LDAP
Authentication
server.
vRA
Appliance
connection to
the SMTP
service
vRA SelfService Web
Components
connection to
the vRA
Server
Manager
Service
vRA Manager
Service
Domain Controllers
389
TCP
Bi-Directional
vRA Manager
Service
Domain Controllers
636
TCP
Bi-Directional
vRA Manager
Service
SMTP Server
25
TCP
Inbound /SMTP
vRA Manager
Service
SQL Database Server
1433
TCP
Inbound /MSSQL
vRA Manager
Service
vRA Load Balancer
(Web Server)
443
TCP
Inbound
vRA vSphere proxy
agent
ESXi Hosts
443
TCP
Inbound
vRA vSphere proxy
agent
vRA Manager Service
(Load Balancer)
443
TCP
Inbound
vRA vSphere proxy
agent
vCenter Server
443
TCP
Inbound
vRA IaaS Web
Server
Domain Controllers
389
TCP
Inbound
vRA IaaS Web
Server
Domain Controllers
636
TCP
Inbound
vRA IaaS Web
Server
SMTP Server
25
TCP
Inbound /SMTP
vRA IaaS Web
Server
SQL Database Server
1433
TCP
Inbound /MSSQL
The lookup
port of your
LDAP
Authentication
server.
The lookup
port of your
secure LDAP
Authentication
server.
vRA SelfService Web
Components
connection to
the SMTP
service
vRA Manager
Service
connection to
the SQL
Server
Database
vRA manager
Servers to
vRA Model
Manager
vSphere proxy
agent
connection to
the ESXi
Hosts
vSphere proxy
agent
connection to
the vRA
Server
Manager
Service
vSphere proxy
agent
connection to
the vCenter
Server
The lookup
port of your
LDAP
Authentication
server.
The lookup
port of your
secure LDAP
Authentication
server.
vRA Web
Components
connection to
the SMTP
service
vRA Web
Components
connection to
the SQL
Server
Database
vRA IaaS Web
Server
vRA Manager Server
(Load Balancer)
443
TCP
Inbound
vRA Application
Services
vRA IaaS Web Server
(Load Balancer)
443
TCP
Inbound
Cloud Workloads
vRA Manager Server
(Load Balancer)
80
TCP
Inbound /HTTP
Cloud Workloads
vRA Manager Server
(Load Balancer)
443
TCP
Inbound /HTTPS
Cloud Workloads
vRA Application
Services
80
TCP
Inbound /HTTP
Cloud Workloads
vRA Application
Services
8443
TCP
Inbound /HTTPS
Cloud Workloads
vRA Application
Services
5671
TCP
Inbound
vRA Web
Components
connection to
the vRA
Server
Manager
Service
Application
Director to
vRA Model
Manager
vRA Agent
(Gugent) to
vRA IaaS
Manager
Server
vRA Agent
(Gugent) to
vRA IaaS
Manager
Server
vRAS Agent
to vRAS
Server
communicatio
n
vRAS Agent
to vRAS
Server
communicatio
n
vRAS Agent
to vRAS
Server
communicatio
n RabbitMQ