Rule for Datto Appliance
For IP 10.xx.20.15 allow ports 80, 443, 2200-2250, 22, UDP 123 to have access to IP’s:
207.223.32.253
8.8.8.8
8.34.181.199/32
8.34.176.0/24
47.19.105.0/24
162.244.87.51
162.244.87.37/32 port 5044
162.244.87.38/32 port 5044
162.244.87.0/24, port 443 and port 80
198.49.95.0/24
198.137.225.0/24, port 80 and port 2200-2250
206.201.136.0/24
206.201.137.0/24
27.111.249.1/24
206.201.137.0/24
162.244.87.109 – dattobackup.com
23.202.72.84 – datto.com
8.34.181.249 – ntp.dattobackup.com
198.135.233.13 – activate.storagecraft.com
91.189.88.0 through 91.189.95.255
Also allow 10.xx.20.15 to resolve DNS to 8.8.8.8.
Rule Between Datto Appliance and Servers
Between IP 10.xx.20.15 and the whole vlan 10 (and other vlans of the servers that will be backed up), open ports: 139, 25566, 3389, 3260, 445. This rule should be bidirectional, because source could be either way.
Rule For VNC Access Over Browser for Local Virtualization
Between 10.xx.20.15 and the IP of the IT machine open range of ports 6080-6085.