...
Permit SSH traffic (TCP/22) from the preferred prefix.
Open the port for DNS (UDP/53).
Permit secure web traffic (HTTPS/443) only from a Custom IP prefix representing the network of hosts that access the vNIOS instance for management and configuration.
Open two ports for NIOS Grid Joining traffic:
UDP/1194
UDP/2114
Open the port for the Infoblox API Proxy (TCP/8787).
Open a port for VM VRRP (UDP/802) if the node is a member in an HA pair.
Open the following ports if you want to deploy the reporting appliance IB-V5005 that is supported in NIOS 8.6.2 and later versions:
7000 WebUI (Master,Indexer)
7089 Management
7887 Replication
9997 Data Forwarding
8000 WebUI
8089 Management
9185 Splunk REST API
...