Network Firewall Requirements

Following are the Network Firewall Requirements for Gigamon fabrics for Nutanix deployments.

Direction

Type

Protocol

Port

CIDR

Purpose

GigaVUE‑FM

Inbound

HTTPS

TCP

443

Anywhere

Any IP

Allows GigaVUE® V Series Nodes, GigaVUE V Series Proxy, and GigaVUE‑FM administrators to communicate with GigaVUE‑FM

Inbound

SSH

TCP

22

Anywhere

Any IP

Allows GigaVUE® V Series Nodes, GigaVUE V Series Proxy, and GigaVUE‑FM administrators to communicate with GigaVUE‑FM

Outbound

Custom TCP Rule

TCP

9902

GigaVUE V Series Proxy IP

Allows GigaVUE‑FM to communicate with GigaVUE V SeriesProxy.

Outbound

Custom TCP Rule

TCP

9440

Prism Central IP, Prism Element IP

Allows GigaVUE‑FM to communicate with Prism Central and Prism Element.

GigaVUE V Series Node

Inbound

Custom TCP Rule

TCP

9903

GigaVUE V SeriesProxy IP

Allows GigaVUE V Series Proxy to communicate with GigaVUE® V Series Nodes

Outbound

Custom UDP Rule

UDP

VXLAN (default 4789)
L2GRE (IP 47)

Tool IP

Allows GigaVUE® V Series Node to communicate and tunnel traffic to the Tool

Outbound

Custom ICMP Rule

ICMP

-

Tool IP

Allows GigaVUE® V Series Node to health check the tool traffic