WAZUH PORTS - FIREWALL

[Atlas Atlas]

Hello,

Please can someone help me. What ports to open in Firewall because i have a firewall and when i try to make it ANY ANY Wazuh works Good but when i try to open just 443 and 55000 Wazuh get down and tell me can not get API ?

Thank you 

[Adebayo Kalejaiye]

Hello Atlas,

In order to integrate firewall with Wazuh, the firewall should be configured to send logs via Port 514 to Wazuh.  To further buttress how Wazuh integrates with network devices it can be configured to receive log events through remote syslog. or you can also configure Wazuh agent to forward the logs to a file which is then being read by Wazuh.

In addition, you can also check the guide here on port requirement by Wazuh.

I hope this helps.

Best Regards,

Adebayo

[Atlas Atlas]

Hello,

i mean what to ports to open in Firewall to the internet to let WAZUH get updates vulnerabilities and API....

Because when i open just https and http WAZUH getting down.

Thanks

[Adebayo Kalejaiye]

Hello Atlas,

Please see the required ports in the documentation  https://documentation.wazuh.com/current/getting-started/architecture.html#required-ports for Wazuh to work effectively.  Also as regards vulnerability feed, you can check the documentation https://documentation.wazuh.com/current/user-manual/capabilities/vulnerability-detection/offline-update.html for clarity.

I hope this helps

Best Regards,

Adebayo