Hi JB,
Hope you are doing well. Thank you for using Wazuh.
Please allow me some time as I investigate this inquiry, and I'll provide you with an appropriate response.
Regards
Md. Nazmur Sakib
Hi JB,
The Wazuh agent is not officially supported on FreeBSD but you may install it from sources following the instructions for installing from sources for Linux: https://documentation.wazuh.com/current/deployment-options/wazuh-from-sources/wazuh-agent/index.html
People who are not part of Wazuh Inc. have also compiled the Wazuh agent and made it available online, for example here: https://www.freshports.org/security/wazuh-agent
With this you should be able to monitor FreeBSD with Wazuh agent.
You can also try agentless monitoring.
In the following link you'll find the documentation in order to configure Wazuh Manager for agentless log collection:
https://documentation.wazuh.com/current/user-manual/reference/ossec-conf/agentless.html#agentless
A sample configuration:
And how it works:
By protocol if you are referring to the port and protocol needs for Wazuh agent. Check this document:
https://documentation.wazuh.com/current/getting-started/architecture.html#required-ports
Hope it helps.
Regards
Md. Namzur Sakib