This section describes the prerequisites that must be met before installing the SD-WAN Orchestrator. What to read next Instance RequirementsVMware recommends installation of the Orchestrator and Gateway applications as a virtual machine (i.e. guest instance) on an existing hypervisor. Upstream Firewall ConfigurationThe upstream firewall needs to be configured to allow inbound HTTP (TCP/80) as well as HTTPS (TCP/443). If a stateful firewall is in place, established connections that are outbound originated should also be allowed to facilitate upgrades and security updates. External ServicesThe SD-WAN Orchestrator relies on several external services. Before proceeding with an installation, ensure that licenses are available for each of the services. Parent topic: Install SD-WAN Orchestrator