-
Products
-
SonicPlatform
SonicPlatform is the cybersecurity platform purpose-built for MSPs, making managing complex security environments among multiple tenants easy and streamlined.
Discover More
-
-
Solutions
-
Federal
Protect Federal Agencies and Networks with scalable, purpose-built cybersecurity solutions
Learn MoreFederalProtect Federal Agencies and Networks with scalable, purpose-built cybersecurity solutions
Learn More - Industries
- Use Cases
-
-
Partners
-
Partner Portal
Access to deal registration, MDF, sales and marketing tools, training and more
Learn MorePartner PortalAccess to deal registration, MDF, sales and marketing tools, training and more
Learn More - SonicWall Partners
- Partner Resources
-
-
Support
-
Support Portal
Find answers to your questions by searching across our knowledge base, community, technical documentation and video tutorials
Learn MoreSupport PortalFind answers to your questions by searching across our knowledge base, community, technical documentation and video tutorials
Learn More - Support
- Resources
- Capture Labs
-
- Company
- Contact Us
Restrict access to MySQL port on GMS Distributed setup
04/26/2024 
0 People found this article helpful
95,575 Views
Description
Restrict access to MySQL port on GMS Distributed setup
Resolution
Inbound rule to restrict access to MySQL port for GMS Distributed setup on Windows
- RDP into the Windows server where the GMS console is installed.
- Click on Start >> Administrative tools >> Windows Firewall with Advanced Security
- Go to Inbound Rules >> New Rule
- Click on Custom, and on the next page, select All Programmes.
- Next at the Protocol & Ports wizard
Select the Protocol Type TCP, Specific Ports option for the Local Port, enter the port number 3306, and click Next.
- Next at the Scope wizard need to enter the Remote IP Address of the Agents to connect the port
Click on the Add Button, enter the IP Address, and click OK and Next.
- Select Allow the connection option and click Next.
- On the Profile Page, select all three options. Domain, Private and Public.
- Click the Next Button
- In the final step, you need to provide the Name of this Rule. (eg. MYSQL Port Restriction Rule)
- Click on the Finish button.
Inbound rule to restrict access to MySQL port for GMS Distributed setup for Virtual Machine (ESXi)
- Login to upstream firewall for GMS
- Create Address Object and Service Object for MySQL port 3306
- Now create an access rule to deny access to port 3306 from any network or zone
Note: Replace NSM-QA and NSM-QA-INTERNAL ZONE (From and To) and create as per your source and destination(10.5.40.147-GMS).
If not using upstream firewall, pls refer to below KB to create 'Firewall Rules' on ESXi host to limit access:
Add Allowed IP Addresses for an ESXi Host by Using the VMware Host Client
Related Articles
- How to Expand the Hard Drive of a GMS Virtual Appliance
- How to modify Template Attributes (NSM)
- How to extract a public certificate and private key from .pfx for use in GMS/Analytics
YES
NO