It seems like when this was created it didn't account for the broker and SA head unit being separate devices. Attached is the SA Network Architecture and Ports.pdf that I am referring to.
7u26jDcL8P5SZHURPfKbMOWMl2FoOW0TxsaBLcALJ68= The transports between appliances would be the same regardless of physical or virtual. The only thing that could possibly be an issue would be if the customer has ports strictly locked down on the VM hosts (physical ESX boxes) which would require the ESX admin to make specific exceptions on the Hosts.
