topic Re: Nimble Storage Firewall Rules in Array Setup and Networking

Nimble Storage Firewall Rules

cbrasga24 — Fri, 28 Aug 2015 18:09:27 GMT

If your organization restricts outbound internet traffic you may need to configure rules which allow the Nimble Storage SAN (Management IP address and Controller A & B diagnostic IP addresses) to communicate with Nimble Storage servers on specific ports.

The Nimble Storage SAN requires the following firewall rules:

Description	Destination	Port	Protocol
AutoSupport and Heartbeat	nsdiag.nimblestorage.com	TCP 443	HTTPS
Software Updates and Downloads	update.nimblestorage.com	TCP 443	HTTPS
Alerts	nsalerts.nimblestorage.com	TCP 443	HTTPS
Streaming Stats & VMVision Per-VM Alerts	nsstats.nimblestorage.com	TCP 443	HTTPS
InfoSight	infosight.nimblestorage.com	TCP 443	HTTPS
Manual SCP of cores to Nimble Storage Support	support.nimblestorage.com	TCP 22	SCP
Nimble Storage Support Secure Tunnel Connection	hogan.nimblestorage.com	TCP 2222	SSH

Note: It is recommended to use the fully qualified domain name (ex. nsdiag.nimblestorage.com) rather than IPs, as IPs may change without notice.

Re: Nimble Storage Firewall Rules

leoocampo132 — Thu, 02 Jun 2016 15:02:11 GMT

The above article neglects to mention that you'll also need to enable outbound pings (ICMP echo requests) to some (if not all) of the listed remote IPs. It's not clear to me whether this is actually required for core functionality or merely diagnostic tests, but the tests in Administration > Alerts & Monitoring > AutoSupport & HTTP Proxy > Test AutoSupport Settings will fail otherwise.

Re: Nimble Storage Firewall Rules

cbrasga24 — Thu, 09 Jun 2016 16:23:01 GMT

That is true. Can a Nimble engineer clarify what address(es) need ping? As I would rather be specific than broad with the rules. Thanks.

Re: Nimble Storage Firewall Rules

dejvnull49 — Mon, 22 Aug 2016 12:32:15 GMT

+1 on verification from Nimble regarding this...

Re: Nimble Storage Firewall Rules

sl0n136 — Fri, 02 Sep 2016 14:15:12 GMT

Is it possible to configure "Secure Tunnel" with HTTP proxy?

Re: Nimble Storage Firewall Rules

bst126 — Tue, 05 Sep 2017 09:01:36 GMT

support.nimblestorage.com does not exist (NXDOMAIN). What is the correct A?

Re: Nimble Storage Firewall Rules

darienn — Mon, 09 Sep 2019 09:03:48 GMT

Hello,

Is this information still valid? If not, is there an updated version?

Thanks!