I have installed Update Manager on a different server, instead of using the VC server. I ran the installation with default ports and the VC was installed with the default ports also on its server. Update Manager runs fine and downloads patches. When I try scanning the esx I get an error. Metadate can not be found. When I open all incoming\outgoing on the ESX hosts and the scans run fine.
My question is i do not want to open all ports to run updates. What firewall ports do i need to keep the Metadata error from happening?