Network Firewall Requirement for GigaVUE Cloud Suite

GigaVUE‑FM

Allows GigaVUE-FM to accept Management connection using REST API.

Allows users to access GigaVUE-FM UI securely through HTTPS connection.

Allows CLI access to user-initiated management and diagnostics.

Allows GigaVUE-FM to receive registration requests from UCT-V Controller using REST API.

Allows GigaVUE-FM to receive registration requests from GigaVUE V Series Node using REST API when GigaVUE V Series Proxy is not used.

Allows GigaVUE-FM to receive registration requests from GigaVUE V Series Proxy using REST API.

Allows GigaVUE‑FM to receive traffic health updates from GigaVUE V Series Nodes.

Allows GigaVUE‑FM to receive statistics from Next Generation UCT-V.

Allows GigaVUE‑FM to receive Application Intelligence and Application Visualization reports from GigaVUE V Series Node.

Allows GigaVUE‑FM to communicate control and management plane traffic with UCT-V Controller

Allows GigaVUE‑FM to communicate control and management plane traffic to GigaVUE V Series Proxy

Allows GigaVUE‑FM to communicate control and management plane traffic to GigaVUE V Series Node

Allows GigaVUE‑FM to reach the Public Cloud Platform APIs.

UCT-V Controller

Allows UCT-V Controller to communicate control and management plane traffic with GigaVUE‑FM

Allows UCT-V Controller to receive the registration requests from UCT-V.

Allows CLI access for user-initiated management and diagnostics, specifically when using third party orchestration.

Allows UCT-V Controller to send the registration requests to GigaVUE-FM using REST API.

Allows UCT-V Controller to communicate control and management plane traffic with UCT-Vs.

Allows UCT-V Controller to send traffic health updates to GigaVUE‑FM.

UCT-V

Allows UCT-V to receive control and management plane traffic from UCT-V Controller

Allows UCT-V to communicate with UCT-V Controller for registration and Heartbeat

Allows UCT-V to tunnel VXLAN traffic to GigaVUE V Series Nodes

Allows UCT-V to tunnel L2GRE traffic to GigaVUE V Series Nodes

Allows UCT-V to securely transfer the traffic to the GigaVUE V Series Node

Allows UCT-V to send traffic health updates to UCT-V Controller.

GigaVUE V Series Proxy (optional)

Allows GigaVUE‑FM  to communicate control and management plane traffic with GigaVUE V Series Proxy.

Allows GigaVUE V Series Proxy to receive registration requests and heartbeat messages from GigaVUE V Series Node.

Allows CLI access for user-initiated management and diagnostics, specifically when using third party orchestration.

Allows GigaVUE V Series Proxy to communicate the registration requests to GigaVUE-FM

Allows GigaVUE V Series Proxy to communicate control and management plane traffic with GigaVUE V Series Node

GigaVUE V Series Node

Allows GigaVUE V Series Node to communicate control and management plane traffic with GigaVUE-FM

Allows GigaVUE V Series Node to communicate control and management plane traffic with GigaVUE V Series Proxy.

Allows GigaVUE V Series Nodes to receive VXLAN tunnel traffic to UCT-V

Allows GigaVUE V Series Nodes to receive L2GRE tunnel traffic to UCT-V

Allows GigaVUE V Series Node to receive tunnel traffic from UDPGRE Tunnel

Allows CLI access for user-initiated management and diagnostics, specifically when using third party orchestration.

Allows to securely transfer the traffic to GigaVUE V Series Nodes.

Allows GigaVUE V Series Node to send traffic health updates to GigaVUE‑FM.

Allows GigaVUE V Series Node to tunnel output to the tool.

Allows GigaVUE V Series Node to tunnel output to the tool.

Allows GigaVUE V Series Node to send Application Intelligence and Application Visualization reports to GigaVUE-FM.

Allows GigaVUE V Series Node to send NetFlow traffic to an external tool.

Allows GigaVUE V Series Node to send Application Metadata Intelligence log messages to external tools.

Allows GigaVUE V Series Node to send health check tunnel destination traffic.

Allows GigaVUE V Series Node to send registration requests and heartbeat messages to GigaVUE V Series Proxy when GigaVUE V Series Proxy is used.

Allows GigaVUE V Series Node to send registration requests and heartbeat messages to GigaVUE-FM when GigaVUE V Series Proxy is not used.

Allows to securely transfer the traffic to an external tool.

Universal Cloud Tap - Container deployed inside Kubernetes worker node

Allows UCT-C to send statistics information to UCT-C Controller.

Allows UCT-C to tunnel traffic to the GigaVUE V Series Node or other destination.

UCT-C Controller deployed inside Kubernetes worker node

Allows GigaVUE-FM to communicate with UCT-C Controller.

Allows UCT-C Controller to send statistics to GigaVUE-FM.