• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 1860
  • Last Modified:

vCenter Server behind TMG firewall / proxy, how to connect?

I have a vCenter virtual server behind a TMG firewall / proxy server.  What ports etc. must I forward to enable a VMware Client to be able to access this vCenter Server?
 
0
townsma
Asked:
townsma
2 Solutions
 
Andrew Hancock (VMware vExpert / EE MVE^2)VMware and Virtualization ConsultantCommented:
902, 903, 80, 443 TCP

Source
http://kb.vmware.com/kb/1012382 
0
 
sthrmeCommented:
Hi,
Create IP based firewall rule for VMware server. Allow outbound traffic for specific Server.

regards,

Tanveer Hussain


0
 
costa73Commented:
Correct me if I'm wrong, but I'm assuming that you want to publish the vCenter Server on the Internet... If that's the case, I'd reccomend that you put in place some kind of strong authentication before allowing the connection to the vCenter from a public network. Don't just let anyone try a shot at guessing your passwords...The quickest/easiest way would be to establish a VPN, and then allow access to vCenter, this way you're sure that only people you know are trying to access vCenter.

If this is not the case, and you simply want to publish a vCenter on a perimeter/DMZ/managed network, to users on a private network (going through TMG) then just use the info the previous posters gave you. And remember: you'll have extra steps to perform if you're using HTTPS filtering on your Web Access/Firewall rules.
0
 
townsmaAuthor Commented:
I agree, in hindsight, I think putting a VPN controlled workstation behnd the TMG will probably be the safest plan.

Thanks to everyone for the advice provided.
0
 
townsmaAuthor Commented:
Thanks to everyone.
0

Featured Post

Threat Trends for MSPs to Watch

See the findings.
Despite its humble beginnings, phishing has come a long way since those first crudely constructed emails. Today, phishing sites can appear and disappear in the length of a coffee break, and it takes more than a little know-how to keep your clients secure.

Tackle projects and never again get stuck behind a technical roadblock.
Join Now