For only BSA Console (aka RCP or Client UI) only 9840 and 9841 (or more accurately, base+40 and base+41) are needed
9842 (base+42) is for NSH
9843 (base+43) is for WebServer
This is the link to "master" 8.6 docs page for ports:
If I want to use NSH commands from the Jumpserver do I need to open that port as well or is NSH allowed via the console?
Todd McDaniel wrote:
If I want to use NSH commands from the Jumpserver do I need to open that port
If you have NSH_PROXY configured (which is recommended), and you want to run NSH from wherever it is installed, then port 9842 (base+42) will need to be open to the Application Server providing the NSH_PROXY service