Hi, we would connect in to the XMS management server (either physical or virtual) to run CLI commands or access the GUI (similar to how you would access the array).  From the XMS we can run commands against the storage controllers.  As far as port requirements, you will want to open 80, 443, 22, 42502 from ESRS to XMS.  Then the XtremIO typically sends alerts back to ESRS over HTTPS protocol.  Search for "docu55301" on support.emc.com for these, and other devices, requirements.  
We have multiple Xtreme I/O installs that are below 4.0 code at the moment.  I asked the implementation people what IP's do we run the rules to?  The XIO nodes or the XMS and was told the XIO nodes, now c/e's are saying it should be the XMS.  The XMS is not installed on the XIO itself but in our VM infrastructure.  I cannot seem to get a straight answer on this.  Run the firewall rules straight to the XIO node IP's or run them to the XMS server?
ESRS and XIO what IP's to run rules for