Product manual

GFI EventsManager 2 Installing GFI EventsManager | 34
Port Protocols Description
1521 UDP and
TCP
Used to collect Oracle Server audit logs. Port 1521 is the default port for this connection. If the
port is changed manually in the Oracle Listener’s configuration, adjust firewall settings
accordingly.
49153 UDP and
TCP
Used by GFI EventsManager to collect events from event sources with Microsoft
®
Windows
®
Vista or
Microsoft
®
Windows
®
7.
2.2.6 Firewall permissions
The following table contains permissions that must be allowed by the firewall of the GFI
EventsManager host:
Firewall
Permissions and
Audit Policies
Windows
®
Server
2008
Windows
®
Server
2003
Windows
®
XP Windows
®
7 Windows
®
Vista
Remote Event
Log Management
Enable Not applicable Not applicable Enable Enable
File and Printer
sharing
Enable Enable Enable Enable Enable
Network
discovery
Enable Not applicable Not applicable Enable Enable
Audit policy:
Object access
Enable Not applicable Not applicable Enable Enable
Audit policy:
Process tracking
Enable Not applicable Not applicable Enable Enable
Audit policy:
Audit account
management
Enable Enable Enable Enable Enable
Audit policy:
Audit system
events
Enable Enable Enable Enable Enable
Table 8: Firewall permissions
Note
For more information, refer to Enabling permissions on events sources manually or
Enabling permissions on event sources automatically.
2.2.7 Event source settings
The following table contains settings that must be configured on your event sources. Event sources
are computers that you want to monitor by GFI EventsManager:
Log Type Description
Windows
®
event log proc-
essing
Enable remote registry.
Text log processing The source folders must be accessible via Windows
®
shares.
Syslog and SNMP Traps
processing
Configure sources/senders to send messages to the computer/IP where GFI
EventsManageris installed.
Scanning machines with
Windows
®
Vista or later
Install GFI EventsManager on a computer running Windows
®
Vista or later.
System auditing Enable auditing on event sources. For information, refer to Enabling event source
permissions manually and Enabling event source permissions automatically.
Table 9: Event source settings