no need to forward 15671 because it is not use, the management plugin runs on 15672 with SSL