Skip to content
  • There are no suggestions because the search field is empty.

NetWitness UEBA Standalone Installation

NetWitness UEBA Standalone Installation

This section contains a high-level UEBA standalone installation diagram and a list of NetWitness UEBA ports.

The following diagram illustrates the NetWitness UEBA standalone installation.

netwitness_uebadep-diagram_591x351.png

UEBA Host and Service Ports

  • Source Host:

    UEBA Server

  • Destination Host:

    NW Server

  • Destination Ports:

    TCP 443

  • Comments:

    NetWitness Update Repository


  • Source Host: UEBA Server
  • Destination Host: NW Server
  • Destination Ports: TCP 56003 (SSL), 50003 (Non-SSL), 50103 (REST)
  • Comments: Broker Application Ports

  • Source Host: UEBA Server
  • Destination Host: NW Server
  • Destination Ports: TCP 56005 (SSL), 50005 (Non-SSL), 50105 (REST)
  • Comments: Log Hybrid, Concentrator Application Ports

  • Source Host: Admin Workstation
  • Destination Host: UEBA Server
  • Destination Ports: 443
  • Comments: UEBA Monitoring

  • Source Host: Admin Workstation
  • Destination Host: UEBA Server
  • Destination Ports: 22
  • Comments: SSH

  • Source Host: Admin Workstation
  • Destination Host: UEBA Server
  • Destination Ports: 8100
  • Comments: Airflow UI