I'm testing out the Cloud VPN Gateway with a BR100. I'm running the CVG on an ESXi box inside our network (i.e. behind a Cisco ASA firewall). I'm at the point where I need to assign a public IP on the ASA and NAT that address to the CVG. What ports need to be open from the outside for the CVG to function?