RSA NetWitness Node-0 Closed Ports

Issue

Ports that are required for NetWitness hosts are not open and listed on Node 0.

Resolution

An error is displayed as the NetWitness hosts ports are not open and listed on Node 0.
Perform any of the following.
1. Ensure that the required port is open. For more information, see “Network Architecture and Ports” topic in the Deployment Guide.
2. If any of the ports ( for example, RabbitMQ, Mongo) are blocked, then you must update the rules for the (Admin Server) Node 0 ports in the iptables file.

 vi /etc/sysconfig/iptables

3. You can open the blocked port using iptables rules like ACCEPT.
For example:

 -A INPUT -p tcp -m tcp -m multiport --dports 5671 -m comment --comment "rabbitmq-amqp" -m conntrack --ctstate NEW -j ACCEPT

4. If the ports are blocked due to network firewall, you must contact network team.

Product Details

RSA Product Set: NetWitness Platform
RSA Product/Service Type: RSA NetWitness Platform
RSA Version/Condition: 11.5.0.0 and Later
Platform: CentOS
O/S Version: 6/7

Approval Reviewer Queue

RSA NetWitness Suite Approval Queue