Only port 443 (SSL) is required to be open for communication between the up.time monitoring station and vCenter and ESX servers.
This is typically the same port used when connecting to vCenter/ESX hosts via the vSphere desktop client.
All SOAP API calls are performed through this port.