From the course: Migrating Applications, Workloads, and Servers to AWS

Review firewall requirements

- [Instructor] The application migration services firewall requirements are relatively straightforward. First, you're going to need to enable communications across TCP Port 443. This port is used for communications with the application migration service API. And this holds true whether you're performing an agent-based migration, or an agentless migration. You're also going to need to make sure that TCP Port 1500 is open, because this port is used by the virtual machine replication process. In other words, when your virtual machines are copied from your on-premises environment, up to the application migration service in the Amazon Cloud, TCP Port 1500 is the port through which that replication process occurs. And once again, that holds true whether you're performing an agent-based or an agentless migration. Now, if you are performing an agentless migration, then you're going to have to set up a special purpose virtual machine, and this is only an option in VMware environments. The special purpose virtual machine is going to run something called the vCenter client. And the vCenter client's job is to communicate with both the vCenter server and with the application migration service. So this vCenter client virtual machine has to be able to communicate with vCenter, and it has to be able to do so through whatever port you've set up your vCenter server to use. Normally that is port 443, but you can configure a vCenter server to use a different port. So if you've opened up a different port on your vCenter server, then you'll need to take that into account when configuring your firewalls.

Contents