The firewall setup "should" be fine. We are only doing the storage sharing between sites for DR purposes and wont be running any VMs from one site to the other. I'm thinking its because the IPs of the iSCSI vmk are on a different subnet than the storage at the remote site.
The 3rd site that is on a different subnet but on the same vCenter 5.5 server works with the storage but doesn't have any iSCSI vmk ports or bindings setup. It appears the storage traffic goes through the management IP which I guess is ok for emergencies. Is there a way to attach to the remote storage that way with the hosts that do have iSCSI vmks?