vManage firewall rules

[JW_UK]

Hi there,

On the link below under the “Administrative Ports Used by vManage NMS” section is mentions 'incomming' traffic:

https://sdwan-docs.cisco.com/Product_Documentation/Getting_Started/Viptela_Overlay_Network_Bringup/01Bringup_Sequence_of_Events/Firewall_Ports_for_Viptela_Deployments

Can anyone confirm if this traffic flow is initiated by vManage towards the SD-WAN router, in otherwords internet (untrusted) to internal network (private)?

Thanks!

[daniel.dib · Accepted solution]

Incoming means that it's traffic coming in to vManage. You need HTTPs to reach the GUI for management. SSH is so you can use the vManage CLI and so on.

[TusharGaba0848 · Accepted solution]

Basically incoming would be to the box traffic to vManage, now depending where is your vManage and who is trying to make a connection to it, and depending where Firewall is in the transit, create rules accordingly. In Security Verbiage, “To the Box” traffic should explain it.

[JW_UK]

Thanks both, that makes sense, I was worried it was incomming to the sd-wan router and not vManage.