Overview
This article provides information on the different ports that are used by GFI EventsManager.
Information
The following ports are used by GFI EventsManager. Your firewall may need to be configured to allow connections from the GFI EventsManager Server on the ports listed below.
Listening Ports on the GFI EventsManager Server
| Port | Description |
|
Database SQL Port: TCP 1433 (Only for EventsManager 2011) Database Server Port: TCP 12345 (Only for EventsManager 2012) Database Server Port: TCP 9292 (Only for EventsManager 2013) |
Port used by GFI EventsManager to connect to the remote database server. |
| RPC Ports: TCP/UDP 7787-7788 | Dynamically assigned RPC (Remote Procedure Call) ports used by GFI EventsManager to handle the communications between the internal components of the product including the event processing engine and the user interface. |
Connections Established From the GFI EventsManager Server
| Port | Description |
| HTTP Port: TCP 80 | Used to download product updates. |
| RPC Port: TCP/UDP 135 | Used to publish information regarding available dynamic ports. EventsManager uses this information to communicate with target machines. |
| NetBIOS Port: TCP/UDP 139 | Used to retrieve the event log descriptions from target machines. |
| SNMP Port: TCP/UDP 162 | Used for SNMP (Simple Network Management Protocol) Traps. This can be changed in Configuration > SNMP Traps Options. |
| SMB Port: TCP 445 | Used to retrieve the event log descriptions from target machines. |
| Syslog Port: TCP/UDP 514 | Used for Syslog. This can be changed in Configuration > Syslog Server Options. |
| SQL Port: TCP 1433 | Used for SQL Audit communication. |
| Oracle Port: TCP/UDP 1521 | Used for communication with Oracle servers. |
| Ports: TCP/UDP 49153 | Port used by GFI EventsManager to collect Windows Events from Microsoft Vista and newer operating systems. |
Note: Traffic to and from EventsManager may also flow via ports that are not listed above. This is merely a reference.