If we using the SWIM functionality of the DNAC , would 80 port should be allowed by to cisco.com, cant we fetch the image using 443 port
Also , as per the below link , with ISE below communication to be opened, is it encrypted /secured communication?
UDP 1645 or 1812 | RADIUS | Needed only if you are using external authentication with a RADIUS server. | Port must be open only if an external RADIUS server is used to authenticate user login to Cisco DNA Center. |
TCP 5222, 8910 | Cisco ISE | Cisco DNA Center uses Cisco ISE XMP for PxGrid. | Port must be open for Cisco ISE. |
TCP 9060 | Cisco ISE | Cisco DNA Center uses Cisco ISE ERS API traffic. | Port must be open for Cisco ISE. |
https://www.cisco.com/c/en/us/td/docs/cloud-systems-management/network-automation-and-management/dna-center/hardening_guide/b_dnac_security_best_practices_guide.html