This section describes the prerequisites that must be met before installing the SASE Orchestrator. What to read next Instance RequirementsVMware recommends installation of the Orchestrator and Gateway applications as a virtual machine (i.e. guest instance) on an existing hypervisor. Upstream Firewall ConfigurationThe upstream firewall needs to be configured to allow inbound HTTP (TCP/80) as well as HTTPS (TCP/443). If a stateful firewall is in place, established connections that are outbound originated should also be allowed to facilitate upgrades and security updates. External ServicesThe SASE Orchestrator relies on several external services. Before proceeding with an installation, ensure that licenses are available for each of the services. Parent topic: Install SASE Orchestrator
