How to disable port 80 on an RSA Security Analytics server appliance

Issue

How to disable port 80 on an RSA Security Analytics server appliance.
How do I turn off port 80 on my Security Analytics appliance?
What are the pros and cons of disabling port 80 on my Security Analytics server?

Cause

Port 80 is used by default by the "lighttpd" process, through which appliances pull updates from the Security Analytics server appliance.  However, in some cases, a network policy does not allow port 80 to be opened and it must be disabled.

Resolution

To disable port 80 on the Security Analytics server appliance, perform the following steps:

1. Connect to the Security Analytics server appliance via SSH.
2. Issue the following command to stop the service:  stop lighttpd
3. Issue the following command to modify the startup script:  echo "start on runlevel [5]" > /etc/init/lighttpd.override

Notes

Caution!  By making this change, the Security Analytics repository function can no longer be used.

Product Details

RSA Product Set: NetWitness Logs & Packets
RSA Version/Condition: 10.x, 11.x
Platform: CentOS
O/S Version: EL6, EL7

Approval Reviewer Queue

RSA NetWitness Suite Approval Queue