If you add the following line to $HCIROOT/server/server.ini
you’ll be ok when using the virtual ip address.
[firewall]
rmi_exported_server_port=172.20.67.187
Use your ip address of course.
Then bounce the host server and you’ll be in business.
You need to always use the virtual name from then on.