Firewall configuration for oracle linux 8 after wazuh installation

[Haziq Mt Roslan]

Hi all,

I installed wazuh server on Oracle Linux 8 VM and I cant connect to the wazuh server from another machine but still in the same network (because it is not in the recommended system lists) and I also cannot connect my wazuh agent to the server, the status is always pending and close wait for windows endpoint but after I disabled my firewall, everything works fine.

I just want to know the configuration on allowing this services to work just fine without disabling my firewall. Thanks in advance.

[Abdullah Al Noman]

Hello Haziq,

Hope you are doing good today.

Wazuh uses a list of default ports for the communication of Wazuh core components. Have a look at this Required ports - Wazuh guide to see the required posts list.

For Wazuh agent communication with Wazuh server, you might enable the following ports from your firewall:

• 1515/TCP - Agent enrollment service
• 1514/TCP - Agent connection service
• 55000/TCP - Wazuh server RESTful API

You can follow Wazuh agent enrollment guide to know more.

Hope this helps. 

Let me know if you require further clarification.

Regards,