Configuring an external firewall to allow ESX/ESXi and vCenter Server Traffic

Last week i was working with a customer, who is planning to add firewall on their external ESXI on which they have public IP.

Their requirement was to have the exact list of ports required for this activity. We have worked and enabled the following:

Mandatory Ports:

22 – SSH (TCP)
53 – DNS (TCP and UDP)
80 – HTTP (TCP/UDP)
902 – vCenter Server / VMware Infrastructure Client – UDP for ESX/ESXi Heartbeat (UDP and TCP)
903 – Remote Access to VM Console (TCP)
443 – Web Access (TCP)

Optional Ports:

For a complete list of ports, see: https://ports.vmware.com/

The list is valid all following version

vSphere · September 23, 2022 0