I know about the documented ports that VSA uses - 5721 and 443. But are there other ports that VSA uses or attempts to use?
I am seeing a lot of deny messages for ports in the 54665-54669. Also I am seeing deny messages for ports 62213 and 62214. These only occur when a tech is controlling a server via VSA.
5722 is used by the legacy Acronis backup module. Not sure about the others, but I'd assume there is dynamic port access required as part of setting up KLC/KRC sessions.....hopefully you get an official answer.
Also, are these requests you see outbound or inbound?