Network Firewall Requirement for GigaVUE Cloud Suite

GigaVUE‑FM

Allows GigaVUE-FM to accept Management connection using REST API.

Allows users to access GigaVUE-FM UI securely through an HTTPS connection.

Allows CLI access to user-initiated management and diagnostics.

Allows GigaVUE-FM to receive registration requests from UCT-V Controller using REST API.

Allows GigaVUE-FM to receive registration requests from GigaVUE V Series Node using REST API when GigaVUE V Series Proxy is not used.

Allows GigaVUE-FM to receive registration requests from GigaVUE V Series Proxy using REST API.

Allows GigaVUE-FM to receive registration requests from UCT-C Controller using REST API.

Allows GigaVUE‑FM to receive traffic health updates from GigaVUE V Series Nodes.

Allows GigaVUE‑FM to receive statistics from UCT-V Controllers.

Allows GigaVUE‑FM to receive certificate requests from UCT-V Controller.

Allows GigaVUE‑FM to receive certificate requests from GigaVUE V Series Proxy.

Allows GigaVUE‑FM to receive certificate requests from GigaVUE V Series Node.

Allows GigaVUE‑FM to receive statistics from UCT-C Controllers.

Allows GigaVUE‑FM to receive Application Intelligence and Application Visualization reports from GigaVUE V Series Node.

Allows GigaVUE‑FM to communicate control and management plane traffic with UCT-V Controller.

Allows GigaVUE‑FM to communicate control and management plane traffic to GigaVUE V Series Proxy.

Allows GigaVUE‑FM to communicate control and management plane traffic to GigaVUE V Series Node.

Allows GigaVUE‑FM to communicate control and management plane traffic to UCT-C Controller.

Allows GigaVUE‑FM to send ACME challenge requests to UCT-V Controller.

Allows GigaVUE‑FM to send ACME challenge requests to GigaVUE V Series Node.

Allows GigaVUE‑FM to send ACME challenge requests to GigaVUE V Series Proxy.

Allows GigaVUE‑FM to reach the Public Cloud Platform APIs.

UCT-V Controller

Allows UCT-V Controller to communicate control and management plane traffic with GigaVUE‑FM

Allows UCT-V Controller to receive traffic health updates from UCT-V.

Allows CLI access for user-initiated management and diagnostics, specifically when using third party orchestration.

Allows UCT-V Controller to receive the ACME challenge requests from the GigaVUE-FM

Allows UCT-V Controller to receive the certificate requests from the UCT-V

Allows UCT-V Controller to receive the registration requests and heartbeat from UCT-V.

Allows UCT-V Controller to send the registration requests to GigaVUE-FM using REST API.

Allows UCT-V Controller to send traffic health updates to GigaVUE‑FM.

Allows GigaVUE-FM to receive certificate requests from the UCT-V Controller.

Allows UCT-V Controller to communicate control and management plane traffic with UCT-Vs for UCT-Vs with version greater than 6.10.00.

Allows ACME validation flow from UCT-V Controller to UCT-V.

UCT-V

Allows UCT-V to receive control and management plane traffic from UCT-V Controller

Allows UCT-V to receive the ACME challenge requests from the UCT-V Controller

Allows UCT-V to tunnel VXLAN traffic to GigaVUE V Series Nodes

Allows UCT-V to tunnel L2GRE traffic to GigaVUE V Series Nodes

Allows UCT-V to securely transfer the traffic to the GigaVUE V Series Node

Allows UCT-V to send traffic health updates to UCT-V Controller.

Allows UCT-V to receive the registration requests and heartbeat to UCT-V Controller.

Allows UCT-V to receive ACME validation flow from UCT-V Controller

GigaVUE V Series Node

Allows GigaVUE V Series Node to communicate control and management plane traffic with GigaVUE-FM

Allows GigaVUE V Series Node to communicate control and management plane traffic with GigaVUE V Series Proxy.

Allows GigaVUE V Series Nodes to receive VXLAN tunnel traffic to UCT-V

Allows GigaVUE V Series Nodes to receive L2GRE tunnel traffic to UCT-V

Allows GigaVUE V Series Node to receive tunnel traffic from UDPGRE Tunnel

Allows CLI access for user-initiated management and diagnostics, specifically when using third party orchestration.

Allows GigaVUE V Series Node to receive the ACME challenge requests from GigaVUE-FM

Allows UCT-V to receive the ACME challenge requests from the GigaVUE V Series Proxy

Allows to securely transfer the traffic to GigaVUE V Series Nodes.

Allows GigaVUE V Series Node to receive tunnel traffic from AWS Gateway Load Balancer.

Allows GigaVUE V Series Node to send traffic health updates to GigaVUE-FM.

Allows GigaVUE V Series Node to tunnel output to the tool.

Allows GigaVUE V Series Node to tunnel output to the tool.

Allows GigaVUE V Series Node to send Application Intelligence and Application Visualization reports to GigaVUE-FM.

Allows GigaVUE V Series Node to send NetFlow Generation traffic to an external tool.

Allows GigaVUE V Series Node to send certificate request to GigaVUE V Series Proxy IP.

Allows GigaVUE V Series Node to send Application Metadata Intelligence log messages to external tools.

Allows GigaVUE V Series Node to send health check tunnel destination traffic.

Allows GigaVUE V Series Node to send registration requests and heartbeat messages to GigaVUE-FM when GigaVUE V Series Proxy is not used.

Allows to securely transfer the traffic to an external tool.

GigaVUE V Series Proxy (optional)

Allows GigaVUE‑FM  to communicate control and management plane traffic with GigaVUE V Series Proxy.

Allows CLI access for user-initiated management and diagnostics, specifically when using third party orchestration.

Allows GigaVUE V Series Proxy to receive the ACME challenge requests from the GigaVUE‑FM

Allows GigaVUE V Series Proxy to receive certificate requests from GigaVUE V Series Node for the configured params and provides the certificate using those parameters.

Allows GigaVUE V Series Proxy to receive registration requests and heartbeat messages from GigaVUE V Series Node.

Allows GigaVUE V Series Proxy to communicate the registration requests to GigaVUE-FM

Allows GigaVUE V Series Proxy to communicate control and management plane traffic with GigaVUE V Series Node

Universal Cloud Tap - Container deployed inside Kubernetes worker node

Allows UCT-C to send statistical information to UCT-C Controller.

Allows UCT-C to tunnel traffic to the GigaVUE V Series Node or other destination.

UCT-C Controller deployed inside Kubernetes worker node

Allows GigaVUE-FM to communicate with UCT-C Controller.

Allows UCT-C Controller to send statistics to GigaVUE‑FM.

UCT-V Controller

Allows UCT-V Controller to receive the registration requests from UCT-V.

Allows UCT-V Controller to communicate control and management plane traffic with UCT-Vs.

UCT-V

Allows UCT-V to communicate with UCT-V Controller for registration and Heartbeat

GigaVUE V Series Node

Allows GigaVUE V Series Node to send registration requests and heartbeat messages to GigaVUE V Series Proxy when GigaVUE V Series Proxy is used.

GigaVUE V Series Proxy (optional)