Threat Report: Exposing Malware in Linux-Based Multi-Cloud Environments | Download Now

EDR: What Ports are used by Server Services?

EDR: What Ports are used by Server Services?

Environment

  • EDR Server: All Versions

Question

What ports are being used by the EDR Server Services?

Answer

Daemon NamePort NumberLog Location
cb-pgsql5002/var/log/cb/pgsql/
cb-datagrid5701/var/log/cb/datagrid/
cb-redis6379/var/log/cb/redis
cb-rabbitmq4369 & 25004/var/log/cb/rabbitmq
cb-solr8080/var/log/cb/solr
cb-nginx443 & 80 (Default)/var/log/cb/nginx
cb-datastore9000/var/log/cb/datastore
cb-coreservices5000/var/log/cb/coreservices
cb-sensorservices6500 & 6501/var/log/cb/sensorservices
cb-liveresponse5600/var/log/cb/liveresponse
cb-allianceclientNone/var/log/cb/allianceclient
cb-enterprised5001 & 5006/var/log/cb/enterprise
cb-supervisordNone/var/log/cb/supervisord

Additional Notes

  • Ports must be accessible between master and minions
  • Outside communication can be locked down to just local machine (single instance) or master and minions except cb-nginx for Sensor and WebUI communication

Related Content


Labels (1)
Tags (2)
Was this article helpful? Yes No
No ratings
Article Information
Author:
Creation Date:
‎09-09-2020
Views:
2978
Contributors