NetWitness UEBA Standalone Installation
NetWitness UEBA Standalone Installation
This section contains a high-level UEBA standalone installation diagram and a list of NetWitness UEBA ports.
The following diagram illustrates the NetWitness UEBA standalone installation.

UEBA Host and Service Ports
- Source Host:
UEBA Server
- Destination Host:
NW Server
- Destination Ports:
TCP 443
- Comments:
NetWitness Update Repository
- Source Host: UEBA Server
- Destination Host: NW Server
- Destination Ports: TCP 56003 (SSL), 50003 (Non-SSL), 50103 (REST)
- Comments: Broker Application Ports
- Source Host: UEBA Server
- Destination Host: NW Server
- Destination Ports: TCP 56005 (SSL), 50005 (Non-SSL), 50105 (REST)
- Comments: Log Hybrid, Concentrator Application Ports
- Source Host: Admin Workstation
- Destination Host: UEBA Server
- Destination Ports: 443
- Comments: UEBA Monitoring
- Source Host: Admin Workstation
- Destination Host: UEBA Server
- Destination Ports: 22
- Comments: SSH
- Source Host: Admin Workstation
- Destination Host: UEBA Server
- Destination Ports: 8100
- Comments: Airflow UI