Novell Doc: Sentinel Rapid Deployment Installation Guide

5.6 Securing the Operating System

Sentinel Rapid Deployment is supported on SUSE Linux Enterprise Server (SLES) 10 SP3 or later. For more information on securing a SLES machine, see the SUSE Linux Enterprise Server 10 documentation.

Secure access to the Sentinel Rapid Deployment server with a firewall. If the Sentinel server is accessible from outside the corporate network, a firewall should be employed to prevent direct access by an intruder.

Enable the following ports in the firewall:

Components	Port
ActiveMQ	61616
PostgreSQL	5432
Tomcat	8443
Sentinel Control Center Proxy Client port	10013
Proxied trusted client	10014
internal_gateway_server and internal_gateway Used between engine and manager	5556
internal_router_server and internal_router_client Used between event router client and server	5558
Event listener port configured in config/collector_mgr.properties as “esecurity.agentmanager.event.port”	35000

NOTE:Ports marked with an asterisk might be different if they were already in use at the time of installation. If they were in use at the time of installation, substitute the port numbers that were prompted for at the time of installation.

For more information on enabling a firewall on SLES 10, see Configuring Firewalls with YaST in the SLES 10 Administration Guide.