In some situations a VM may be on a network that is unreachable by the vRanger host.
vRanger does not need direct network access to the VM itself.
vRanger deploys the VSS/vzShadow tools to a VM via the VMware VIX transports.
This means vRanger needs to be able to access the ESX(i) hosts via the VMware VIX transports. vRanger will access the VM as it would for cataloging or a VIX transport backup/replication.