The docset lists these ports for vna:
The ports for communication to the orchestrators and controllers.
Port 8080 (8443 for https) for communication between VNA and other Broadcom products.
Port 9990 for WildFly management.
But with the WildFly console disabled for security, do we still need port 9990?
DX NetOps VNA : All Supported Versions
Even though we have disabled the admin console by default for wildfly,
Port 9990 is still used by wildfly internally, so it will still be a requirement for VNA installation.
The controller and orchestrator are basically the management interfaces of whatever you want to connect to with a plugin, viptela, vmanage, esxi, etc…
So those ports are whatever the managers are set for, and whatever you put in the plugin configs.