From 2b1576249a9ae1bcd24f3f8b8e4bcd6ee14f1be7 Mon Sep 17 00:00:00 2001
From: Jason Ertel <jason.ertel@securityonionsolutions.com>
Date: Mon, 27 Mar 2023 16:44:21 -0400
Subject: [PATCH] add minion CIDR to search also

---
 setup/so-functions | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/setup/so-functions b/setup/so-functions
index 96c357c74..7d06f7542 100755
--- a/setup/so-functions
+++ b/setup/so-functions
@@ -2289,7 +2289,8 @@ set_initial_firewall_access() {
 		$default_salt_dir/salt/common/tools/sbin/so-firewall --role=analyst --ip=$ALLOW_CIDR --apply=true
 	fi
 	if [[ ! -z "$MINION_CIDR" ]]; then
-		$default_salt_dir/salt/common/tools/sbin/so-firewall --role=sensors --ip=$MINION_CIDR --apply=true
+		$default_salt_dir/salt/common/tools/sbin/so-firewall --role=sensors --ip=$MINION_CIDR --apply=false
+		$default_salt_dir/salt/common/tools/sbin/so-firewall --role=search --ip=$MINION_CIDR --apply=true
 	fi
 }