Nothing really helped, or I'm just dumb.
I don't get why it works with:
XXX.XXX.XXX.XXX:443
but it don't work with:
XXX.XXX.XXX.XXX:444
its exactly the same and I dont see any 902 traffic to the vcenter just the heartbead from the ESXi
realy there must be a bug or something I even exposed the host ESXi server in the fritz.box nothing changed..