VMware Network Port Compendium

Updated 21 Dec 09

Product
AppSpeed

Port

Protocol

Source

Target

AppSpeed Server

vCenter 4 Server

AppSpeed Server
AppSpeed Server
AppSpeed Server
AppSpeed Server
VCB Proxy Server
VCB Proxy Server
vCenter Converter Server
vCenter Converter Server
vCenter Converter Server
vCenter Converter Server
vCenter Converter Server
Source Computer to be converted
Source Computer to be converted
vCenter Converter Server
Source Computer to be converted
vCenter Converter Server
Helper Virtual Machine
vCenter Converter Client
vCenter Converter Server
vCenter Converter Server
Data Recovery vSphere Client Plug-in
Data Recovery vSphere Client Plug-in
FTP Client
ESX Host
SSH Client
ESX Host
ESX Host
SNMP Server
ESX Host
Client PC
ESX Host
ESX Host
ESX Host
ESX Host
ESX Host
ESX/ESXi Host
Client PC
ESX/ESXi Host
ESX/ESXi Host
ESX/ESXi Host
ESX Host
ESX/ESXi Host
ESX/ESXi Host
VI/vSphere Client
ESX/ESXi Host
ESX/ESXi Host
VI/vSphere Client
ESX/ESXi Host
ESX/ESXi Host
VI/vSphere Client
ESX/ESXi Host
ESX/ESXi Host
ESX/ESXi Host
ESX/ESXi Host
ESX/ESXi Host
ESX/ESXi Host
ESX/ESXi Host (VM Target)
ESX/ESXi Host (VM Source)
ESX/ESXi Host
ESX/ESXi Host
ESX/ESXi Host
ESX/ESXi Host
ESX/ESXi 4 Host
ESX/ESXi 4 Host
SNMP Server
Consolidation Target (Physical Server)

vCenter 4 Server
AppSpeed Probe
AppSpeed Probe
AppSpeed Probe
vCenter Server
ESX/ESXi Host
Source Computer to be converted
Source Computer to be converted
Source Computer to be converted
ESX/ESXi Host
vCenter Server
vCenter Server
ESX/ESXi Host
Source Computer to be converted
ESX/ESXi Host
Source Computer to be converted
Source Computer to be converted
vCenter Converter Server
Helper Virtual Machine
Source Computer to be converted
Data Recovery Appliance
Data Recovery Appliance
ESX Host
FTP Server
ESX Host
SSH Server
Active Directory Server
ESX Host
LDAP Server
ESX Host
MS Directory Services Server
SMB Server
MS Directory Services Server
Active Directory Server
SMB Server
DNS Server
ESX/ESXi Host
NFS Server
NFS Server
NTP Time Server
SNMP Collector
ESX/ESXi Host
ESX/ESXi Host
ESX/ESXi Host
ESX/ESXi Host
Syslog Server
ESX/ESXi Host
ESX/ESXi Host
vCenter 4 Server
ESX/ESXi Host
NFS Server
NFS Server
iSCSI SAN
ESX/ESXi Host
ESX/ESXi Host
vCenter 4 Server
ESX/ESXi Host (VM Source)
ESX/ESXi Host (VM Target)
ESX/ESXi Host
ESX/ESXi Host
VMware License Server
VMware License Server
ESX/ESXi 4.x Host
ESX/ESXi 4.x Host
ESXi 4.x Host
vCenter Converter Server

Purpose
vCenter proxy interface. Used only during setup to verify the proxy is setup correctly. Port 80 is the default Web
Service Port, but a different TCP port can be configured in vCenter 4 Server.

80

TCP

443
22
123
1194
443
443
137
138
139
443
443
443
443
445
902
22
22
443
443
9089
443
22024
21
21
22
22
88
161
389
443
445
445
445
464
137-139
53
80
111
111
123
162
427
427
443
443
514
902
902
902
903
2049
2049
3260
5988
5989
5989
8000
8000
2050-2250
8042-8045
27000
27010
8100
8200
161
135

TCP
TCP
TCP
TCP/UDP
TCP
TCP
UDP
UDP
TCP
TCP
TCP
TCP
TCP
TCP
TCP
TCP
TCP
TCP
TCP
TCP
TCP
TCP
TCP
TCP
TCP
TCP
TCP
UDP
TCP
TCP
TCP
TCP
UDP
TCP
TCP
UDP
TCP
TCP
UDP
UDP
UDP
TCP
UDP
TCP
TCP
UDP
TCP
TCP/UDP
UDP
TCP
TCP
UDP
TCP
TCP
TCP
TCP
TCP
TCP
UDP
TCP
TCP
TCP
TCP/UDP
TCP/UDP
UDP
TCP/UDP

Guided Consolidation

137

TCP/UDP

Consolidation Target (Physical Server)

vCenter Converter Server

Guided Consolidation

138

TCP/UDP

Consolidation Target (Physical Server)

vCenter Converter Server

Guided Consolidation

139

TCP/UDP

Consolidation Target (Physical Server)

vCenter Converter Server

Guided Consolidation

445

TCP/UDP

Consolidation Target (Physical Server)

vCenter Converter Server

Lab Manager
Lab Manager
Lab Manager
Lab Manager
Lab Manager
Lab Manager
Lab Manager
Lab Manager
Lab Manager
Lab Manager
Lab Manager
Orchestrator
Orchestrator

137
138
139
389
443
443
445
514
636
1433
5212
25
389

UDP
UDP
TCP
TCP
TCP
TCP
TCP
TCP
TCP
TCP
TCP
TCP
TCP

ESX/ESXi Host
ESX/ESXi Host
ESX/ESXi Host
Lab Manager Server
Client PC
Lab Manager Server
ESX/ESXi Host
Lab Manager Server
Lab Manager Server
Lab Manager Server
Lab Manager Server
VCO Server
VCO Server

SMB File Server

SMB File Server
SMB File Server
LDAP Server
Lab Manager Server
vCenter Server
SMB File Server
ESX/ESXi Host
LDAP Server
Microsoft SQL Server
ESX/ESXi Host
SMTP Server
LDAP Server

Orchestrator

443

TCP

VCO Server

vCenter Server

Orchestrator

636

TCP

VCO Server

LDAP Server

VCO uses LDAP authentication and group membership to determine role authorization in LCM and access to VMs/requests. This is
the SSL secured LDAP protocol ldaps (the SSL pendent of 389). This is used for secured LDAP authentication

Orchestrator

1433

TCP

VCO Server

Microsoft SQL Server

vCenter Orchestrator Server to Microsoft SQL Server for VCO Database

AppSpeed
AppSpeed
AppSpeed
AppSpeed
Consolidated Backup
Consolidated Backup
Converter 3.x + 4.x
Converter 3.x + 4.x
Converter 3.x + 4.x
Converter 3.x + 4.x
Converter 3.x + 4.x
Converter 3.x + 4.x
Converter 3.x + 4.x
Converter 3.x + 4.x
Converter 3.x + 4.x
Converter 4.x only
Converter 4.x only
Converter 4.x only
Converter 4.x only
Converter 4.x only
Data Recovery
Data Recovery
ESX 3.x + 4.x (not ESXi)
ESX 3.x + 4.x (not ESXi)
ESX 3.x + 4.x (not ESXi)
ESX 3.x + 4.x (not ESXi)
ESX 3.x + 4.x (not ESXi)
ESX 3.x + 4.x (not ESXi)
ESX 3.x + 4.x (not ESXi)
ESX 3.x + 4.x (not ESXi)
ESX 3.x + 4.x (not ESXi)
ESX 3.x + 4.x (not ESXi)
ESX 3.x + 4.x (not ESXi)
ESX 3.x + 4.x (not ESXi)
ESX 3.x + 4.x (not ESXi)
ESX/ESXi 3.x + 4.x
ESX/ESXi 3.x + 4.x
ESX/ESXi 3.x + 4.x
ESX/ESXi 3.x + 4.x
ESX/ESXi 3.x + 4.x
ESX/ESXi 3.x + 4.x
ESX/ESXi 3.x + 4.x
ESX/ESXi 3.x + 4.x
ESX/ESXi 3.x + 4.x
ESX/ESXi 3.x + 4.x
ESX/ESXi 3.x + 4.x
ESX/ESXi 3.x + 4.x
ESX/ESXi 3.x + 4.x
ESX/ESXi 3.x + 4.x
ESX/ESXi 3.x + 4.x
ESX/ESXi 3.x + 4.x
ESX/ESXi 3.x + 4.x
ESX/ESXi 3.x + 4.x
ESX/ESXi 3.x + 4.x
ESX/ESXi 3.x + 4.x
ESX/ESXi 3.x + 4.x
ESX/ESXi 3.x + 4.x
ESX/ESXi 3.x + 4.x
ESX/ESXi 3.x + 4.x
ESX/ESXi 3.x + 4.x
ESX/ESXi 3.x only
ESX/ESXi 3.x only
ESX/ESXi 4.x only
ESX/ESXi 4.x only
ESXi 4.x only
Guided Consolidation

2009 VMware, Inc. All rights reserved.

Default port for communications. A different TCP port can be configured in vCenter 4 Server
Connections to the probes to access the probes outside of the VPN.
NTP services
Communications over OpenVPN
Required for VCB and vcbMounter communication and backup processes
Required for VCB and vcbMounter communication and backup processes
For hot migration. Not required if the source computer does not use NetBIOS
For hot migration. Not required if the source computer does not use NetBIOS
For hot migration. Not required if the source computer does not use NetBIOS
Required for system conversion
Required if vCenter Server is the conversion target
Required if vCenter Server is the conversion target
Required for destination VM access when target is ESX/ESXi/vCenter
Required for system conversion. Not required if the source computer uses NetBIOS
Required for data transport during cloning of system to be converted to target ESX/ESXi Host
Required for conversion of Linux-based source computers
Required for conversion of Linux-based source computers (data flows from source to VM)
Only required if the Converter Client and Converter Server were installed on different systems
Required for conversion of Linux-based source computers
Required for system conversion. Remote agent deployment
vCenter Server to vDR communications
Data Recovery management
FTP
FTP
SSH
SSH
PAM Active Directory Authentication - Kerberos
SNMP Polling
PAM Active Directory Authentication LDAP
Host VI Management via web browser
PAM Active Directory Authentication
SMB
PAM Active Directory Authentication
PAM Active Directory Authentication Kerberos Password Services
SMB
DNS
Redirect Web Browser to HTTPS Service (443)
NFS Client RPC Portmapper
NFS Client RPC Portmapper
NTP Client
SNMP Trap Send
CIM Service Location Protocol (SLP)
CIM Service Location Protocol (SLP)
VI/vSphere Client to ESX/ESXi Host management connection
Host to host VM migration and provisioning
Remote syslog logging
VI/vSphere Client to ESX/ESXi hosted VM connectivity
Authentication, Provisioning, VM Migration
Heartbeat
VM Remote VM Console
NFS Client
NFS Client
Software iSCSI Client and Hardware iSCSI HBA
CIM Client to CIM Secure Server
CIM Client to CIM Secure Server
CIM transaction communication
VMotion Communication on VMKernel Interface
VMotion Communication on VMKernel Interface
VMware HA
VMware HA
ESX/ESXi 3.x Host to License Server communication
ESX/ESXi 3.x Host to License Server communication
VMware Fault Tolerance. ESX/ESXi 4 only.
VMware Fault Tolerance. ESX/ESXi 4 only.
SNMP Polling. Not used in ESXi 3.x
Microsoft DCE Locator Service, also known at End-Point Mapper
NetBIOS names service. Firewall administrators frequently see largernumbers of incoming packets to port 137. This is because of
Windows servers that use NetBIOS (as well as DNS) to resolve IP addresses to names using the gethostbyaddr() function. As users
behind the firewalls visit Windows-based Web sites, those servers frequently respond with NetBIOS lookups.
NetBIOS datagram Used by Windows, as well as UNIX services (such as SAMBA). Port 138 is used primarily by the SMB browser
service that obtains Network Neighborhood information.
NetBIOS Session Windows File and Printer sharing.
DNS Direct Hosting port. In Windows 2000 and Windows XP, redirector and server components now support direct hosting for
communicating with other computers running Windows 2000 or Windows XP. Direct hosting does not use NetBIOS for name
resolution. DNS is used for name resolution, and the Microsoft networking communication is sent directly over TCP without a
NetBIOS header. Direct hosting over TCP/IP uses TCP and UDP port 445 instead of the NetBIOS session TCP port 139.
SMB File Sharing for Importing/Exporting VMs. ESXi requires Lab Manager 4.x
SMB File Sharing for Importing/Exporting VMs. ESXi requires Lab Manager 4.x
SMB File Sharing for Importing/Exporting VMs. ESXi requires Lab Manager 4.x
LDAP Authentication (optional)
Lab Manager Console (Web Browser)
Lab Manager to vCenter Server Communication
SMB File Sharing for Importing/Exporting VMs. ESXi requires Lab Manager 4.x
ESX/ESXi Host Virtual Router. ESXi requires Lab Manager 4.x
LDAPS Authentication (optional)
Lab Manager Connectivity to Microsoft SQL Server (for LM database)
Lab Manager Agent. ESXi requires Lab Manager 4.x
Email notifications
LDAP Authentication
Used to obtain virtual infrastructure and virtual machine information from orcestrated vCenter Server(s) through the vCenter API

VMware Technical Services

VMware Network Port Compendium

Updated 21 Dec 09

Product
Orchestrator
Orchestrator
Orchestrator

Port
1521
3306
5432

Protocol
TCP
TCP
TCP

Source
VCO Server
VCO Server
VCO Server

Target
Oracle Database Server
MySQL Server
PostgresSQL Server

Orchestrator

8230

TCP

VCO Client

VCO Server

Orchestrator

8240

TCP

VCO Client

VCO Server

Command port The application communication port (RMI container port),

it is used for remote invocations. It is part of the JBoss Application server
infrastructure.

Orchestrator

8250

TCP

VCO Client

VCO Server

Messaging port The Java messaging port used to dispatch events. It is part
of the JBoss Application server infrastructure

Orchestrator
Orchestrator
Orchestrator
Orchestrator

8280
8281
8281
8282

TCP
TCP
TCP
TCP

VCO Server
VCO Server
vCenter Server
VCO Client PC

VCO
VCO
VCO
VCO

8283

TCP

VCO Client PC

VCO Server

80
80
80
1433
1521
1526
5000
9007
137
138
139
389
443
443
443
445
514
636
5212

TCP
TCP
TCP
TCP
TCP
TCP
TCP
TCP
UDP
UDP
TCP
TCP
TCP
TCP
TCP
TCP
TCP
TCP
TCP

Site Recovery Manager

Site Recovery Manager
Site Recovery Manager
Site Recovery Manager
vCenter Server
vCenter Server
Site Recovery Manager
Site Recovery Manager
ESX Host
ESX Host
ESX Host
Stage Manager Server
Client PC
Stage Manager Server
Stage Manager Server
ESX Host
Stage Manager Server
Stage Manager Server
Stage Manager Server

Local vCenter Server

vCenter Server
Remote vCenter Server
Microsoft SQL Server
Oracle Database Server
Oracle Database Server
IBM DB/2 Database Server
External SRM API Client
SMB File Server
SMB File Server
SMB File Server
LDAP Server
Stage Manager Server
ESX Host
vCenter Server
SMB File Server
ESX Host
LDAP Server
ESX Host

Update Manager

80

TCP

Update Manager Server

www.vmware.com and xml.shavlik.com

Update Manager
Update Manager

80
80

TCP
TCP

ESX/ESXi Host
Update Manager Server

Update Manager Host

vCenter Server

Update Manager

443

TCP

Update Manager Server

www.vmware.com and xml.shavlik.com

443
443
902
1433
1521

TCP
TCP
TCP
TCP
TCP

ESX/ESXi Host
vCenter Server
Update Manager Server
Update Manager Server
Update Manager Server

Update Manager Server

Update Manager Server
ESX/ESXi Host
Microsoft SQL Server
Oracle Database Server

Orchestrator
Site Recovery Manager
Site Recovery Manager
Site Recovery Manager
Site Recovery Manager
Site Recovery Manager
Site Recovery Manager
Site Recovery Manager
Site Recovery Manager
Stage Manager
Stage Manager
Stage Manager
Stage Manager
Stage Manager
Stage Manager
Stage Manager
Stage Manager
Stage Manager
Stage Manager
Stage Manager

Update
Update
Update
Update
Update

Manager
Manager
Manager
Manager
Manager

(SRM)
(SRM)
(SRM)
(SRM)
(SRM)
(SRM)
(SRM)
(SRM)

Server
Server
Server
Server

Update Manager

8084

TCP

Update Manager Server

vCenter Server

Update Manager
Update Manager

9084
9087

TCP
TCP

Update Manager Server

Update Manager Server

ESX/ESXi Host
vCenter Server

9000-9100

TCP

Update Manager Server

ESX/ESXi Host

25
53
80
88
88
161
162
389
443
443
443
445
445
902
902
903
903
1433
1521
8005
8006
8083
8085
8086
8087
27000
27000
27010
27010
389

TCP
UDP
TCP
TCP
UDP
UDP
UDP
TCP
TCP
TCP
TCP
TCP
UDP
UDP
UDP
TCP
TCP
TCP
TCP
TCP
TCP
TCP
TCP
TCP
TCP
TCP
TCP
TCP
TCP
TCP

vCenter Server
vCenter Server
Client PC
vCenter Server
vCenter Server
SNMP Server
vCenter Server
vCenter Server
vCenter Server
Client PC
VI/vSphere Client
vCenter Server
vCenter Server
vCenter Server
ESX/ESXi Host
Client PC
vCenter Server
vCenter Server
vCenter Server
vCenter Server
vCenter Server
vCenter Server
vCenter Server
vCenter Server
vCenter Server
vCenter Server
VMware License Server
vCenter Server
VMware License Server
vCenter Server

SMTP Server
DNS Server
vCenter Server
Active Directory Server
Active Directory Server
vCenter Server
SNMP Server
LDAP Server
ESX/ESXi Host
vCenter Server
vCenter Server
Active Directory Server
Active Directory Server
ESX/ESXi Host
vCenter Server
vCenter Server
ESX/ESXi Host
Microsoft SQL Server
Oracle Database Server
vCenter Server
vCenter Server
vCenter Server
vCenter Server
vCenter Server
vCenter Server
VMware License Server
vCenter Server
VMware License Server
vCenter Server
Linked vCenter Servers

vCenter 4.x only

>1024
(dynamic)

RPC

Linked vCenter Servers

Linked vCenter Servers

vCenter 4.x only

vCenter 4.x only
View 3.x only
View 3.x only
View 3.x only
View 4.x only
View 4.x only
View 4.x only

8080
8443
8443
32111
32111
902
3268
3269

TCP
TCP
TCP
TCP
TCP
TCP
TCP
TCP

Client PC
Client PC
View Connection Server/View Manager
View Client
View Agent (Virtual Desktop)
View Client/View Client with Offline Desktop
View/VDM Connection Server/View Manager
View/VDM Connection Server/View Manager

vCenter 4 Server
vCenter 4 Server
vCenter Server
View Agent (Virtual Desktop)
View Client
ESX Host
Active Directory Server
Active Directory Server

View Client/View Client with Offline Desktop View Agent (Virtual Desktop)

Update Manager
vCenter
vCenter
vCenter
vCenter
vCenter
vCenter
vCenter
vCenter
vCenter
vCenter
vCenter
vCenter
vCenter
vCenter
vCenter
vCenter
vCenter
vCenter
vCenter
vCenter
vCenter
vCenter
vCenter
vCenter
vCenter
vCenter
vCenter
vCenter
vCenter
vCenter

2.5.x + 4.x
2.5.x + 4.x
2.5.x + 4.x
2.5.x + 4.x
2.5.x + 4.x
2.5.x + 4.x
2.5.x + 4.x
2.5.x + 4.x
2.5.x + 4.x
2.5.x + 4.x
2.5.x + 4.x
2.5.x + 4.x
2.5.x + 4.x
2.5.x + 4.x
2.5.x + 4.x
2.5.x + 4.x
2.5.x + 4.x
2.5.x + 4.x
2.5.x + 4.x
2.5.x + 4.x
2.5.x + 4.x
2.5.x + 4.x
2.5.x + 4.x
2.5.x + 4.x
2.5.x + 4.x
2.5.x + 4.x
2.5.x + 4.x
2.5.x + 4.x
2.5.x + 4.x
4.x only

View 4.x only

9427

TCP

View 4.x only

View 4.x only

50002
50002

TCP/UDP
TCP/UDP

2009 VMware, Inc. All rights reserved.

View Agent (Virtual Desktop)

View Client

View Client
View Agent (Virtual Desktop)

Purpose
vCenter Orchestrator Server to Oracle for VCO Database
vCenter Orchestrator Server to MySQL Server for VCO Database
vCenter Orchestrator Server to PortgresSQL Server for VCO Database
Lookup port The main port to communicate with Orchestrator
Configurator server (JNDI port). All other ports communicate with the
Orchestrator Configurator smart client through this one. It is part of the JBoss
Application server infrastructure

Port used by VCO Server to connect to the Web front-end via HTTP
Port used by VCO Server to connect to the Web front-end via HTTPS
Port used by VCO Server to connect to vCenter Server to communicate with the vCenter API
HTTP server port The port for the HTTP connector used to connect to the Web frontend.
HTTPS server port The port for the SSL HTTP connector used to connect to the Web frontend. Requires Jetty to be configured for
SSL.
SRM communication with local vCenter server (inventory)
vSphere Client Plug-in download
SRM communication. SRM Server at Site A to vCenter Server at Site B (failover) over HTTP and SSL tunnel.
SRM Connectivity to Microsoft SQL Server (for SRM database)
SRM Connectivity to Oracle (for SRM database)
SRM Connectivity to Oracle (for SRM database)
SRM Connectivity to IBM DB/2 (for SRM database)
SRM communication via WSDL
SMB File Sharing for Importing/Exporting VMs
SMB File Sharing for Importing/Exporting VMs
SMB File Sharing for Importing/Exporting VMs
LDAP Authentication (optional)
Stage Manager Console (Web Browser)
Stage Manager Server communication with ESX Host Agent
Stage Manager Server communucation with vCenter Server
SMB File Sharing for Importing/Exporting VMs
ESX Host Virtual Router
LDAPS Authentication (optional)
Stage Manager Agent
To obtain metadata for the updates, Update Manager must be able to connect to http://www.vmware.com and http://xml.shavlik.com
ESX/ESXi Host to Update Manager Server . The reverse proxy forwards the required to port 9084
Update Manager to vCenter Server communication
To obtain metadata for the updates, Update Manager must be able to connect to http://www.vmware.com and http://xml.shavlik.com
ESX/ESXi Host to Update Manager Server . The reverse proxy forwards the required to port 9084
vCenter Server to Update Manager Server. The reverse proxy forwards the request to port 8084
To push patches and updates from Update Manager to the ESX/ESXi Hosts to be updated
Update Manager to Microsoft SQL Server connectivity (for UM Database)
Update Manager to Oracle connectivity (for UM Database)
SOAP between components of Update Manager Server and the vCenter Update Manager client plug-in. Configurable at
install.
ESX/ESXi hosts connect to the VUM webserver listening for updates. Configurable at install.
Port used for uploading host update files. Configurable at install.
This is the recommend port range from which to choose ports for Update Manager if ports 80 and 443 are already in use. Update
Manager automatically opens these ports for ESX Host scanning and remediation
Email notifications
DNS lookups
Redirect Web Browser to HTTPS Service (443)
AD Authentication
AD Authentication
SNMP Polling
SNMP Trap Send
LDAP Authentication
vCenter Agent
VI Web Access (Web Browser)
VI\vSphere Client access to vCenter Server
AD Authentication
AD Authentication
Heartbeat
Heartbeat
VI/vSphere Client to VM Console
VI/vSphere Client to VM Console (after connection established between VI/vSphere Client and vCenter)
For vCenter Microsoft SQL Server Database
For vCenter Oracle Database
Internal Communication Port
Internal Communication Port
Internal Service Diagnostics
Internal Service Diagnostics
Internal Communication Port
Internal Service Diagnostics
Licensing via FlexLM. Only required by vCenter 4 if ESX/ESXi 3.x Hosts will be supported
Licensing via FlexLM. Only required by vCenter 4 if ESX/ESXi 3.x Hosts will be supported
Licensing via FlexLM. Only required by vCenter 4 if ESX/ESXi 3.x Hosts will be supported
Licensing via FlexLM. Only required by vCenter 4 if ESX/ESXi 3.x Hosts will be supported
Bi-directional LDAP authentication with Kerberos encryption on TCP port 389 is required between all vCenters that need to replicate.
Bi-directional RPC communication on dynamic TCP ports is required between all vCenters that need to replicate (via ADAM)
A VIC still needs the a direct connection to all vCenters that own an object it needs to manage.
VMware vCenter 4 Management Web Services - HTTP
VMware vCenter 4 Management Web Services - HTTPS
View Composer
USB Device Communication
USB Device Communication
(Optional) View Client with Offline Desktop data is downloaded and uploaded through this port.
Global Catalog Server
Global Catalog Server
(Optional) Multimedia Redirection (MMR). MMR is support by View Client and View Client with Offline Desktop on certain
operating systems.
PCoIP (AES 128-bit encryption)
PCoIP (AES 128-bit encryption)

VMware Technical Services

VMware Network Port Compendium

Updated 21 Dec 09

Product
View/VDM 2.x
View/VDM 2.x

Port
80
80

Protocol
TCP
TCP

View/VDM 2.x

80

TCP

80
88
88
389
443
443
443
443
443
443
445
445

TCP
TCP
UDP
TCP/UDP
TCP
TCP
TCP
TCP
TCP
TCP
TCP
UDP

View/VDM 2.x

3389

TCP

View/VDM 2.x

3389

TCP

View/VDM Security Server

Virtual Desktop VM (View/VDM Agent)

View/VDM
View/VDM
View/VDM
View/VDM
View/VDM
View/VDM

4001
4001
4001
4100
8009
8009

TCP
TCP
TCP
TCP
TCP
TCP

View/VDM Security Server

View/VDM Connection Server/View Manager
Virtual Desktop VM (View/VDM Agent)
View/VDM Connection Server/View Manager
View/VDM Security Server
View/VDM Connection Server/View Manager

View/VDM
View/VDM
View/VDM
View/VDM
View/VDM
View/VDM

View/VDM 2.x

42966

TCP

View Client/View Client with Offline Desktop ESX Host

View/VDM 2.x

1024-65535

TCP

View/VDM Connection Server/View Manager View/VDM Connection Server/View Manager

This is required for ADAM replication (Active Directory "lite" replication) between VDM Connection Servers. With a Registry entry
this can be fixed to a defined set of ports, but by default its a random TCP high port

View/VDM 2.x

1024-65535

TCP

View/VDM Connection Server/View Manager Virtual Desktop VM (View/VDM Agent)

Ephemeral Ports. A short-lived connection between View Manager and the virtual desktop

View/VDM
View/VDM
View/VDM
View/VDM
View/VDM
View/VDM
View/VDM
View/VDM
View/VDM
View/VDM
View/VDM
View/VDM

2.x
2.x
2.x
2.x
2.x
2.x
2.x
2.x
2.x
2.x
2.x
2.x

2.x
2.x
2.x
2.x
2.x
2.x

2009 VMware, Inc. All rights reserved.

Source
Client PC
View/VDM Client

Target
View/VDM Connection Server
View/VDM Connection Server

Client PC

View/VDM Security Server

Purpose
VDM Web Access (not required if only HTTPS is to be supported)
VDM Access (not required if only HTTPS is to be supported)
VDM Web Access (not required if only HTTPS is to be supported)
The Security Server used as a proxy in a DMZ to allow for external connections in. The View Manager/Connection Broker has an
ADAM instance on it and thus, a fair amount of the AD (not a good thing to put on the DMZ). If View is LAN-based only, then its
irrelevant. If its publicly accessed, then you definitely want a Security Server to act on behalf of external clients coming in
(assuming no VPN)

View/VDM Client
View/VDM Connection
View/VDM Connection
View/VDM Connection
Client PC
Thin Client
View/VDM Client
Client PC
View/VDM Client
View/VDM Connection
View/VDM Connection
View/VDM Connection

View/VDM Security Server

VDM Access (not required if only HTTPS is to be supported)
Server/View Manager Active Directory Server
AD Authentication
Server/View Manager Active Directory Server
AD Authentication
Server/View Manager LDAP Server
LDAP Authentication
View/VDM Connection Server/View Manager VDM Web Access and VDM Administration
View/VDM Connection Server/View Manager VDM API
View/VDM Connection Server/View Manager VDM Access
View/VDM Security Server
VDM Web Access (Web Browser)
View/VDM Security Server
VDM Access
Server/View Manager vCenter Server
VDM to vCenter communication
Server/View Manager Active Directory Server
AD Authentication
Server/View Manager Active Directory Server
AD Authentication
Direct RDP Connection (RSA RC4 encryption, can be set High/Medium/Low)
- High: encrypts both the data sent from client to server and the data sent from server to client using a 128 bit key.
- Medium: encrypts both the data sent from client to server and the data sent from server to client using a 56 bit key if the client
Client PC/Thin Client/View/VDM Client
Virtual Desktop VM (View/VDM Agent)
is a Windows 2000 or above client, or a 40 bit key if the client is an earlier version.
- Low: encrypts only the data sent from client to server, using either a 56 or 40 bit key, depending on the client version. Useful to
protect usernames and passwords sent from client to server.

Connection Server/View
Security Server
Connection Server/View
Connection Server/View
Connection Server/View
Security Server

Tunneled RDP Connection (RSA RC4 encryption, can be set High/Medium/Low)

- High: encrypts both the data sent from client to server and the data sent from server to client using a 128 bit key.
- Medium: encrypts both the data sent from client to server and the data sent from server to client using a 56 bit key if the client
is a Windows 2000 or above client, or a 40 bit key if the client is an earlier version.
- Low: encrypts only the data sent from client to server, using either a 56 or 40 bit key, depending on the client version. Useful to
protect usernames and passwords sent from client to server.

Manager Java Messenger Service (JMS)

Java Messenger Service (JMS)
Manager
Manager Java Messenger Service (JMS) inter-router traffic
Manager Apache Jserv Protocol (AJP)
Apache Jserv Protocol (AJP)
(Optional) Hewlett-Packard RGS Sender Application is the server-side component of the HP RGS remote display protocol

VMware Technical Services