The Change Guardian server computer uses several ports for internal and external communication. Ensure that you open the appropriate ports for your environment.
|
Component |
Ports |
Direction |
Required/Optional |
Description |
|---|---|---|---|---|
|
Policy Editor Console |
8443 |
Outbound |
Required |
Connects to the Change Guardian server for the following actions:
|
|
2620 |
Outbound |
Optional |
Allows remote object browsing to UNIX-based monitored assets. |
|
|
389 or 636 |
Outbound |
Optional |
Allows remote object browsing to Active Directory. |
|
|
Change Guardian Server |
8094 |
Inbound |
Required |
Allows the Change Guardian server to accept connections from agents that retrieve their assigned monitoring policies. |
|
8443 |
Inbound |
Required |
Allows the Change Guardian server to receive events from monitored assets. NOTE:This port might not be needed if you are sending events from monitored assets to an alternate destination. |
|
|
389 or 636 |
Outbound |
Required |
Enables the LDAP authentication and the expansion of Active Directory groups. The port initiates a connection to the LDAP server. |
|
|
25 |
Outbound |
Optional |
Default email port. This port may be different based on the specific email implementation. |
|
|
54984 |
Inbound |
Optional |
Used by the Sentinel Appliance Management Console (WebYaST). Also used by the Sentinel appliance for the update service. |
|
|
443 or 80 |
Outbound |
Optional |
WebYaST initiates a connection to either the NetIQ appliance update repository (https://nu.novell.com) or a Subscription Management Tool Service location on your network. |
|
|
JAVOS |
8094 |
inbound |
Required |
Allows the JAVOS service to accept connections from agents that are retrieving their assigned monitoring policies. |
|
9094 |
Inbound (loopback) |
Required |
Allows the Change Guardian server to call JAVOS on this port to signal/reset the event destination cache. |
|
|
9095 |
Inbound (loopback) |
Optional |
Allows users to see runtime metrics and active threads. |
|
|
Active Directory Accounts/LDAP Expander |
8088 |
Inbound (loopback) |
Required |
Allows the Change Guardian server to retrieve information about Active Directory accounts. |
|
8089 |
Inbound (loopback) |
Optional |
Allows users to see runtime metrics and active threads. |
|
|
Windows Monitoring Agents |
8094 |
Outbound |
Required |
Allows the agent to connect to the Change Guardian server to retrieve assigned monitoring policies. |
|
8094 |
Inbound |
Optional |
Allows the Policy Editor to connect to the agent to browse objects on the monitored asset. |
|
|
8443 |
Outbound |
Required |
Allows the agent to connect to the Change Guardian server or Sentinel to send events. |
|
|
UNIX Monitoring Agents |
8094 |
Outbound |
Required |
Allows the agent to connect to the Change Guardian server to retrieve assigned monitoring policies. |
|
2620 |
Inbound |
Optional |
Allows the Policy Editor to connect to the agent to browse objects on the monitored asset. |
|
|
8443 |
Outbound |
Required |
Allows the agent to connect to the Change Guardian server or Sentinel to send events. |
|
|
UNIX Agent Manager |
2620 |
Outbound |
Required |
Allows the UNIX Agent Manager to connect to a UNIX agent to get status and diagnostic information. |
|
2222 |
Outbound |
Required |
Allows the UNIX Agent Manager client to connect with the UNIX Agent Manager server. |
|
|
22 |
Outbound |
One of these is required. |
(SSH) UNIX Agent Manager requires SSH+SFTP or Telnet+FTP access to computers targeted for remote agent deployment. |
|
|
21/23 |
Outbound |
(Telnet/FTP) UNIX Agent Manager requires SSH+SFTP or Telnet+FTP access to computers targeted for remote agent deployment. |
||
|
Agent Manager |
8082 |
Inbound |
Required |
Allows the agent to communicate with the Agent Manager. |
|
445 |
Outbound |
Required |
Allows the Agent Manager to deploy agents to Windows computers. |