Hi,
I need to request to open firewall port from apps server to DB servers. I will definitely open firewall port to the 3 SCAN IPs, but do I also need to open the firewall port to VIPs ?
My understanding is apps will only talk to SCAN IPs, it won't talk to VIPs directly(I'll use SCAN name in tns as hostname), SCAN IPs will talk to VIPs so there's no direct communication between client and VIPs as long as I configured SCAN in client TNS. is that correct ?
Thanks