Only port 443 (SSL) is required to be open for communication between the up.time monitoring station and the ESX server. All SOAP API calls are performed through this port.