From 179aa5e29caeb47f95b164600aceec28ce37d0c3 Mon Sep 17 00:00:00 2001
From: Mike Reeves <mike.reeves@securityonionsolutions.com>
Date: Thu, 31 Mar 2022 10:49:38 -0400
Subject: [PATCH] Add firewall rules for Analyst workstation

---
 setup/so-functions | 7 +++++++
 1 file changed, 7 insertions(+)

diff --git a/setup/so-functions b/setup/so-functions
index 6ad0510a5..5badeb08a 100755
--- a/setup/so-functions
+++ b/setup/so-functions
@@ -2722,6 +2722,13 @@ set_initial_firewall_policy() {
 			# TODO: implement
 			;;
 	esac
+
+	# Add some firewall rules for analyst workstations that get added to the grid
+	if [[ $ is_analyst ]]; then
+	    $sshcmd -i /root/.ssh/so.key soremote@"$MSRV" sudo $default_salt_dir/salt/common/tools/sbin/so-firewall includehost minion "$MAINIP"
+	    $sshcmd -i /root/.ssh/so.key soremote@"$MSRV" sudo $default_salt_dir/salt/common/tools/sbin/so-firewall --apply includehost analyst "$MAINIP"
+    fi
+
 }
 
 # Set up the management interface on the ISO