From 986df0c5735ce9b0c2094c3b0fd299b387416294 Mon Sep 17 00:00:00 2001
From: Mike Reeves <mike.reeves@securityonionsolutions.com>
Date: Fri, 8 May 2020 11:13:23 -0400
Subject: [PATCH] Update ports.yml

---
 salt/firewall/ports.yml | 114 +++++++++++++++++++++++++++++++++++++---
 1 file changed, 106 insertions(+), 8 deletions(-)

diff --git a/salt/firewall/ports.yml b/salt/firewall/ports.yml
index 0cb40b29a..a401ed137 100644
--- a/salt/firewall/ports.yml
+++ b/salt/firewall/ports.yml
@@ -1,16 +1,114 @@
 firewall:
   aliases:
+    analyst:
+      ports:
+        nginx:
+          tcp:
+            - 80
+            - 443
+    beats_endpoint:
+      ports:
+        beats:
+          tcp:
+            - 5044
+    forward_nodes:
+      ports:
+        sensoroni:
+          tcp:
+            - 443
+        beats:
+          tcp:
+            - 5044
+        beats_so:
+          tcp:
+            - 5644        
     master:
       ports:
-        sn1:
+        wazuh:
           tcp:
-            - 1000
-            - 1001
+            - 1514
           udp:
-            - 1003
-        sn2:
+            - 1514
+        playbook:
           tcp:
-            - 2000
-            - 2001
+            - 3200
+        mysql:
+          tcp:
+            - 3306
+        navigator:
+          tcp:
+            - 4200
+        kibana:
+          tcp:
+            - 5601
+        redis:
+          tcp:
+            - 6379
+        influxdb:
+          tcp:
+            - 8086
+        osquery:
+          tcp:
+            - 8090
+        cortex:
+          tcp:
+            - 9001
+        elasticsearch:
+          tcp:
+            - 9200
+            - 9300
+        cortex_es:
+          tcp:
+            - 9400
+            - 9500
+    minions:
+      ports:
+        acng:
+            - 3142
+        salt:
+          tcp:
+            - 4505
+            - 4506
+        registry:
+          tcp:
+            - 5000
+        osquery:
+          tcp:
+            - 8080
+        influxdb:
+          tcp:
+            - 8086
+        wazuh:
+          tcp:
+            - 55000
+    osquery_endpoint:
+      ports:
+        fleet:
+          tcp:
+            - 8090
+    search_nodes:
+      ports:
+        redis:
+          tcp:
+            - 6379
+        elasticsearch:
+            - 9300
+    wazuh_endpoint:
+      ports:
+        wazuh:
+          tcp:
+            - 1514
           udp:
-            - 2000
\ No newline at end of file
+            - 1514
+
+        
+        
+          
+
+    
+        
+
+
+        
+        
+          
\ No newline at end of file