NetWitness Precheck - (Component Hosts) Node X closed ports Check

Issue

Pre upgrade check tool shows (Component Hosts) Node X closed ports Check.

Cause

This probe indicates that ports that are required for NetWitness hosts are not open and not listening on Node X.

Resolution

Perform any of the following.
• Ensure that the required port is open. For more information, see “ Network Architecture and Ports” topic in the Deployment Guide.
• If any of the ports (for example, RabbitMQ, Mongo) are blocked, then you must update the rules for the specific component host ports in the iptables file using https://community.netwitness.com/t5/netwitness-knowledge-base/how-to-write-iptable-rules-in-netwitness-platform-11-x/ta-p/677538.

 vi /etc/sysconfig/iptables

• You can open the blocked port using iptables rules like ACCEPT.
For example,

 -A INPUT -p tcp -m tcp -m multiport --dports 5671 -m comment --comment "rabbitmq-amqp" -m conntrack --ctstate NEW -j ACCEPT

• If the ports are blocked due to network firewall, you must contact network team.

Product Details

NetWitness Product Set: NetWitness Platform
NetWitness Product/Service Type: NetWitness component hosts
NetWitness Version/Condition: 11.5 and above
Platform: CentOS 7 / Alma

Approval Reviewer Queue

Technical approval queue