Pure1 and Phone Home: Pure1 is a cloud-based management and monitoring platform. For the FlashArray to communicate its health data, performance metrics, and alerts to Pure Storage, it must be able to "Phone Home." The Power of HTTPS: This communication is encrypted and sent via the HTTPS protocol. Consequently, the standard port for HTTPS, TCP 443, must be opened for outbound traffic on the management network.
Firewall Configuration: The array controllers initiate an outbound connection to the Pure Storage cloud (specifically to destinations like cloud-connect.purestorage.com). Because it is an outbound-initiated connection, most stateful firewalls will allow the return traffic automatically once port 443 is permitted.
Why Option A is incorrect: Port 22 (SSH) is used for secure shell access to the array's CLI. While essential for local administration, it is not used for the automated Phone Home or Pure1 telemetry data stream.
Why Option B is incorrect: Port 8117 was historically used for the "Remote Assist" tunnel in older Purity versions. However, even for Remote Assist, modern Purity versions have transitioned to using port 443 to simplify firewall rules for customers. It is not the standard port for the general Phone Home/Pure1 logging service.
Verification: An administrator can verify connectivity by running the purearray test phonehome command in the CLI. If port 443 is blocked, the test will fail with a connection timeout.