Ports used by On-Prem Analytics

This article describes the list of ports used by On-Prem  Analytics

Web Server Ports (for traffic from Client Browsers to Analytics Web Server GUI - all ports can be customized):

• 80 - HTTP Management  Port (TCP)
• 443 - HTTPS Management Port (TCP)

Syslog Port (Customizable -for firewall to establish connection with Syslog server for reporting)

• 514 (UDP) - Syslogs Port (The syslogs sent to this port on the server from the firewall) 

AppFlow Ports (required to be open, for SonicWall firewall to send AppFlow (Needful/IPFIX)packets to Analytics for reporting)

• 9060 (UDP)
• 2055 (UDP)

Databases (whichever is used in the setup - these are internal ports, for Analytics Servers to communicate with the DB):

• 3306 (TCP) - MySQL

API Ports:

• Syslog-based Analytics- No API ports used
• Flow based Analytics-  3443 (TCP)