NetWitness Precheck - (Component Hosts) Node X closed ports Check

[#1]

Article Number

000002147

Applies To

NetWitness Product Set: NetWitness Platform
NetWitness Product/Service Type: NetWitness component hosts
NetWitness Version/Condition: 11.5 and above
Platform: CentOS 7 / Alma

Issue

Pre upgrade check tool shows (Component Hosts) Node X closed ports Check.

Cause

This probe indicates that ports that are required for NetWitness hosts are not open and not listening on Node X.

Resolution

Perform any of the following.
•    Ensure that the required port is open. For more information, see “Network Architecture and Ports” topic in the Deployment Guide.
•    If any of the ports (for example, RabbitMQ, Mongo) are blocked, then you must update the rules for the specific component host ports in the iptables file using https://community.netwitness.com/t5/netwitness-knowledge-base/how-to-write-iptable-rules-in-netwitness-platform-11-x/ta-p/677538.

vi /etc/sysconfig/iptables

•    You can open the blocked port using iptables rules like ACCEPT.
For example, 

-A INPUT -p tcp -m tcp -m multiport --dports 5671 -m comment --comment "rabbitmq-amqp" -m conntrack --ctstate NEW -j ACCEPT

•    If the ports are blocked due to network firewall, you must contact network team.