Infrastructure monitoring required ports (4309456)

• Negotiate authentication is based on Kerberos authentication, involving tickets/keys obtained from a Key Distribution Center (KDC).
• Basic authentication uses standard HTTP headers to communicate directly with the remote machine.

Ideally the user should be local Account Administrator or Domain account Administrator, also require WinRM, DCOM or WMI permissions.

Ports used by the FMS (121594)

• Linux Host Ports: 22, 23, 80, 443, 4448,  *8080 and 8443
• Windows Host Ports: 22, 23, 80, 443, 445, 593, 1432, 1433, 1434 , 4448, *8080 and 8443

WinRM Connection Ports

• WinRM 1.1 and earlier: The default HTTP port is 80, and the default HTTPS port is 443.
• WinRM 2.0 and later: The default HTTP port is 5985, and the default HTTPS port is 5986.

WMI Connection Ports

• TCP Port 135 (DCE/RPC Locator service, WindowsShellService, WMIConnectionService)
• Either a dynamic range of ports TCP port or a static port
  • Dynamic range: Microsoft's default range of ports or this can be configured to a smaller range of ports.
  • Fixed (Static) port: Please refer to KB 114559 for details how to set up a fixed WMI port in Windows.

• Host configuration (DCOM)
• Configuring Windows Management Instrumentation (WMI)
• Configuring Windows Remote Management (WinRM)
• Advanced System Configuration and Troubleshooting

• Setting up WMI on host machines (102431)
• What ports need to be opened on a firewall for Foglight for database agents? (85747)
• Configuring Windows Remote Management (WinRM) using winrm quickconfig (238657)