Database monitoring utilizes specific port sets for both Database Instance and OS monitoring via the Infrastructure Cartridge. When installed the agents connect to specific Database ports as configured during agent creation/installation or may use known defaults.
SQL Server: 1433 / 1434 (If a Named Instance is configured, SQL Browser will broadcast a list of available servers)
Additionally, single bi-directional RMI ports which are specific to each database platform (can be modified later), are used to retreive metrics in an on-demand fashion.
The Database and Infrastructure agent may also utilize known or specifically configured SSH, WMI, WinRM, LDAP, Kerberos and DNS ports to enable host and instance connectivity. As well, specifically configured ports would be used to monitor add-on database services such as Sybase Backup or XP Server.
There is no current 'scanning' or 'sniffing' functionality which is enabled or required in database monitoring. As well, database monitoring does not perform any security scans for network or service vulnerabilities. This would be the function of other Quest or third party security products specifically meant for that purpose.