Posted in Aria

Firewall requirements in VMware Aria Operations (SaaS) 

   19 July 2023

What is VMware Aria Operations (SaaS)?

VMware Aria Operations (SaaS) is a unified, AI-powered self-driving IT operations management platform for private, hybrid, and multi-cloud environments. It delivers a comprehensive view of your IT infrastructure, including on-premises, cloud, and hybrid environments. Aria Operations uses machine learning and artificial intelligence to proactively identify and resolve issues before they impact your business.

What are the required endpoints for VMware Aria Operations (SaaS)?

By default, VMware Aria Operations (SaaS) requires outbound HTTPS traffic to all endpoints. However, you can configure more restricted firewall rules by allowing only the following endpoints:

  • Commercial Cloud
    • s3-us-west-2.amazonaws.com
    • *.gw.region-code.vrops-cloud.com
      • Note: Replace region-code with the correct region code for your environment.
      • For example, if your environment is in the US region, you would use the endpoint *.gw.us.vrops-cloud.com.
  • Gov Cloud
    • *.gw.vrealize-gov.vmware.com
    • registry.vrealize-gov.vmware.com

In addition to the required endpoints, you may also need to allow outbound HTTPS traffic to the following endpoints if your environment monitors VMC on AWS, VMC on Dell, GCVE, or VCF Cloud Accounts:

  • Commercial Cloud Environments
    • console.cloud.vmware.com
    • vmc.vmware.com
  • Gov Cloud Environments
    • console.cloud-us-gov.vmware.com
    • www.vmc-us-gov.vmware.com

How to configure firewall rules for VMware Aria Operations (SaaS):

To configure firewall rules for VMware Aria Operations (SaaS), you will need to:

  1. Identify the IP addresses or hostnames of your VMware Aria Operations (SaaS) cloud proxies.
  2. Open outbound HTTPS port 443 to the required endpoints on your firewall.
  3. If you are using a firewall appliance, you may need to create a rule for each endpoint.
  4. If you are using a software firewall, you may be able to create a rule that allows outbound HTTPS traffic to all of the required endpoints.

For more information, please see the following VMware documentation:

  • VMware Aria Operations (SaaS) documentation: https://www.vmware.com/products/aria-operations.html
  • VMware Aria Operations (SaaS) firewall configuration: https://docs.vmware.com/en/VMware-Aria-Operations-for-Networks/SaaS/Using-Operations-for-Networks.pdf

🔥Subscribe to the channel: https://bit.ly/3vY16CT🔥

🚨Read my blog: https://angrysysops.com/

👊Twitter: https://twitter.com/AngrySysOps
👊Facebook: https://www.facebook.com/AngrySysOps
👊My Podcast: https://bit.ly/39fFnxm
👊Mastodon: https://techhub.social/@AngryAdmin

🔥vExpert info: https://bit.ly/3vXGPOa

🛒 VMware EMEA store: https://imp.i263671.net/c/3505578/814646/11461

🛒 VMware US store: https://imp.i263671.net/c/3505578/814642/11461

🛒 VMware APAC store: https://imp.i263671.net/c/3505578/814645/11461

 

Please leave the comment