Platform Appliance and Virtual Edition Ports
In the following table, rows shown in bold indicate port changes or additions have been made for the current release.
No port changes were made from IO 6.8.2 to the current release.
Port Number | Source | Target | Description |
|---|---|---|---|
Port 5985 (WinRM HTTP) or 5986 (WinRM HTTPS) | Appliance | Monitored Hyper-V hosts | Outbound; Hyper-V discovery and metrics collection |
22/TCP | Interactive SSH clients | Appliance | Inbound; Appliance Support |
22/TCP | Appliance | Monitored Hosts | Outbound; App Discovery and OS metrics collection |
Appliance | IBM HMC | Outbound; IBM PowerVM Integration | |
Appliance | Brocade FC Switches | Outbound; FC fabric discovery | |
25/TCP | Appliance | Simple Mail Transfer Protocol (SMTP) mail server | Outbound from the appliance |
53/UDP | Appliance | Domain Name System (DNS) server | Outbound from appliance |
80/TCP | Web UI HTTP from client PC | Appliance | Inbound to appliance |
ProbeFC/NAS running firmware version < 5.4 | Appliance | Inbound; Probe log collection and firmware updates | |
80/TCP | Appliance | VMware vCenter Server | Outbound from appliance |
111/TCP/UDP | Appliance | NFS Server | Outbound; Backup |
123/UDP | Appliance | Network Time Protocol (NTP) server | Outbound from appliance |
135/TCP | Appliance | CIFS file server | Outbound; IO backup |
139/TCP | Appliance | CIFS file server | Outbound; IO backup |
161/UDP | Appliance | Simple Network Management Protocol (SNMP) server for ProbeSW metric collection | Outbound from appliance |
162/UDP | Appliance | SNMP trap listener/collector | Outbound from appliance |
389/TCP | Appliance | Lightweight Directory Access Protocol (LDAP) server | Outbound from appliance |
443/TCP | Web UI HTTPS from client PC | Appliance | Inbound to appliance |
ProbeFC/NAS running firmware 5.4 or greater | Appliance | Inbound; Secure probe log collection and firmware updates | |
443/TCP | Appliance | ServiceNow Instance | Outbound from appliance |
Appliance | VMware vCenter Server | Outbound from appliance | |
Appliance | RemoteWisdom server | Outbound from appliance | |
445/TCP | Appliance | Common Internet File System (CIFS) server | Outbound from appliance |
636/TCP | Appliance | Lightweight Directory Access Protocol (LDAP) server for Secure Sockets Layer (SSL) | Outbound from appliance |
2049/TCP/UDP | Appliance | Network File System (NFS) server | Outbound from appliance |
*/UDP (* any of these ports: 2055, 2056, 2058, 4432, 4739, 6343, 9995, 9996) | NetFlow packet collection from routers/vDS | Appliance | Inbound to appliance |
5396/TCP | ProbeFC/NAS | Appliance | Inbound; Secure metrics delivery |
5397/TCP | ProbeFC/NAS | Appliance | Inbound; Unencrypted metrics delivery. Deprecated. |
(5888, 5889, 5890)/TCP | Cisco SAN Switch Telemetry | Appliance | Inbound to appliance |
5988/TCP | Appliance | SMI-S agent (BNA) server for ProbeSW HTTP discovery | Outbound from appliance |
5989/TCP | Appliance | SMI-S agent (BNA) server for ProbeSW HTTPS discovery | Outbound from appliance |
9200/TCP | Appliance | ProbeFC/NAS | Outbound. Probe management. Deprecated. |
9250/TCP | Appliance | ProbeFC/NAS | Outbound; Secure probe management |
Note: For the Microsoft Hyper-V Integration, because MSRPC (DCOM) uses dynamically allocated ports, IO requires that all ports between the appliance and the end device (Windows host) must be open, including the ports on any intermediate firewalls.