both configurations are possible.
If this iscsi box is a shared storage device, e.g. for other UCS domains, and/or non UCS servers, connection to the N7k is the preferred setup.
If this is mainly a test or a SMB environment, direct attachment via appliance port is possible.