vCenter Server behind TMG firewall / proxy, how to connect?

Posted on 2011-09-22
Last Modified: 2012-06-27
I have a vCenter virtual server behind a TMG firewall / proxy server.  What ports etc. must I forward to enable a VMware Client to be able to access this vCenter Server?
Question by:townsma
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
LVL 120

Accepted Solution

Andrew Hancock (VMware vExpert / EE MVE^2) earned 250 total points
ID: 36579895
902, 903, 80, 443 TCP


Expert Comment

ID: 36579978
Create IP based firewall rule for VMware server. Allow outbound traffic for specific Server.


Tanveer Hussain


Assisted Solution

costa73 earned 250 total points
ID: 36585987
Correct me if I'm wrong, but I'm assuming that you want to publish the vCenter Server on the Internet... If that's the case, I'd reccomend that you put in place some kind of strong authentication before allowing the connection to the vCenter from a public network. Don't just let anyone try a shot at guessing your passwords...The quickest/easiest way would be to establish a VPN, and then allow access to vCenter, this way you're sure that only people you know are trying to access vCenter.

If this is not the case, and you simply want to publish a vCenter on a perimeter/DMZ/managed network, to users on a private network (going through TMG) then just use the info the previous posters gave you. And remember: you'll have extra steps to perform if you're using HTTPS filtering on your Web Access/Firewall rules.

Author Comment

ID: 36586026
I agree, in hindsight, I think putting a VPN controlled workstation behnd the TMG will probably be the safest plan.

Thanks to everyone for the advice provided.

Author Closing Comment

ID: 36586032
Thanks to everyone.

Featured Post

Simple, centralized multimedia control

Watch and learn to see how ATEN provided an easy and effective way for three jointly-owned pubs to control the 60 televisions located across their three venues utilizing the ATEN Control System, Modular Matrix Switch and HDBaseT extenders.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
esxi host, bios screen, time appears to be UTC 15 101
VMtools Issue 7 57
Xendesktop MCS 11 33
VMware: Best way to move disks to new datastore? 5 45
Last article we focus in how to VMware: How to create and use VMs TAGs – Part 1 so before follow this article and perform the next tasks, you should read the first article how to create the TAG before using them in Veeam Backup Jobs.
When rebooting a vCenters 6.0 and try to connect using vSphere Client we get this issue "Invalid URL: The hostname could not parsed." When we get this error we need to do some changes in the vCenter advanced settings to fix the issue.
Teach the user how to install and configure the vCenter Orchestrator virtual appliance Open vSphere Web Client: Deploy vCenter Orchestrator virtual appliance OVA file: Verify vCenter Orchestrator virtual appliance boots successfully: Connect to the …
This Micro Tutorial steps you through the configuration steps to configure your ESXi host Management Network settings and test the management network, ensure the host is recognized by the DNS Server, configure a new password, and the troubleshooting…

756 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question