Follow these recommendations:

Note   
When Secure Socket Layer (SSL)
                decryption is in use, the traffic does not pass through the service
                connector.
 
                - Packaged deployment:
                    
Recommended OS
Ubuntu 20.04 or 22.04
VMware OVA
 
                - Dockerized deployment: Compatible with multiple operating systems;
                    requires only Docker to be installed.
 
                - Port availability: The
                    following ports need to be allowed outbound from the RadSec proxy:
                        - WireGuard Encryption
                                Protocol: 51820 
 
                        - IPsec Encryption
                                Protocol: 500, 4500 
 
                    
 
                - Dockerized deployment:
                    compatible with multiple operating systems; requires only Docker to be
                    installed. 
 
                - Port Availability - If the connector and the user are in the same
                    network, open the following ports for outbound requests:

Note   
ARM based
                        installations are not supported.
 
                        - WireGuard Encryption Protocol: 51820 
 
                        - IPsec Encryption Protocol: 500, 4500 
 
                    
 
                - Minimum hardware
                        requirements: CPU: 2 Ram: 4 GB
 
            
  
        Use this task to deploy a service
            connector which: 
                - Connects to private, cloud-hosted
                    application services and facilitates secure data exchange between the user and
                    these application services 
 
                - Performs data transformation and
                    routing between the user and application services 
 
                - Can be hosted in private data
                    center or public cloud such as AWS, Entra ID, and GCP
 
            
        - 
                If deploying a Service Connector
                    outside of the onboarding process, go to  from the navigation pain on the left, if not go to the Deploy Service
                        Connector tab.
            
 - 
                Select  from the drop-down on the right.
                
                    - 
                        Read the Guidelines.
                    
 
                    - 
                        Select Next to configure the connector.
                        
The Deploy Private Hosted Service Connector
                            pop-up window displays.
                     
                    - 
                        For the Connector Name, enter at least three alphanumeric characters
                    
 
                    - 
                        Select an existing site or add a site for Associate
                                Site. 
                    
 
                    - 
                        Enter a size for
                                Set
                                MTU (Maximum Transmission Unit).
                        
The MTU value is the
                            maximum size of a data packet that an internet-connected device can
                            accept in bytes. The MTU size ranges from 1300 to 1500 bytes.
                     
                    - 
                        Select Next.
                    
 
                    - 
                        Review your configuration.
                    
 
                    - 
                        Select Deploy.
                    
 
                    - 
                        Read the information and follow the deployment procedure for the
                            service connector.
                    
 
                    - 
                        Select Close.
                    
 
                
             
        When deployment finishes, the service
            connector status turns green and displays Up.Your enterprise
                applications and networks are now securely accessible to the service
            connector.
        Once you have completed the resources part of the
            onboarding, you can continue to Applications and Application Groups.