You must configure firewalls in your environment to accept commonly supported services.

Use the vSphere Client to configure the service console firewall. When you configure the ESX host security profile in vCenter Server, you add or remove these services or agents, automatically opening or closing predetermined ports in the firewall to allow communication with the service or agent.

The following services and agents are commonly present in a vSphere environment:

NFS client (insecure service)

NTP client

iSCSI software client

CIM HTTP server (insecure service)

CIM HTTPS server

Syslog client

NFS server (insecure service)

NIS client

SMB client (insecure service)

FTP client (insecure service)

SSH client

Telnet client (insecure service)

SSH server

Telnet server (insecure service)

FTP server (insecure service)

SNMP server

Other supported management agents that you install


This list can change, so you might find that the vSphere Client provides services and agents not mentioned in the list. Also, not all services on the list are installed by default. You might be required to perform additional tasks to configure and enable these services.

If you are installing a device, service, or agent not on this list, open ports in the service console firewall from a command line.