On Thu, Jun 16, 2016 at 12:27 PM, Tahir Hafiz <[email protected]> wrote: > We have an OSSEC server located in one particular subnet and the majority of > the agents are located in the same subnet and work fine. > However, we have a few OSSEC agents located in a different subnet and they > are having problems being able to connect to the server. > > We have opened up port 1514 UDP between subnets for ingress and egress > traffic. > > Is there anything that we should do to allow server and agent communication? >
Do you see the traffic on the server from the hosts that are having issues? Do the source IPs match your expectations? > > > > > > -- > > --- > You received this message because you are subscribed to the Google Groups > "ossec-list" group. > To unsubscribe from this group and stop receiving emails from it, send an > email to [email protected]. > For more options, visit https://groups.google.com/d/optout. -- --- You received this message because you are subscribed to the Google Groups "ossec-list" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. For more options, visit https://groups.google.com/d/optout.
