securityonion/salt/firewall/ports.yml

firewall:
  aliases:
    analyst:
      ports:
        nginx:
          tcp:
            - 80
            - 443
    beats_endpoint:
      ports:
        beats:
          tcp:
            - 5044
    fleet:
      ports:
        mysql:
          tcp:
            - 3306
        redis:
          tcp:
            - 6379
        osquery:
          tcp:
            - 8080
    forward_nodes:
      ports:
        sensoroni:
          tcp:
            - 443
        beats:
          tcp:
            - 5044
        beats_so:
          tcp:
            - 5644
    heavy_node:
      ports:
        redis:
          tcp: 
            - 6379
        beats:
            - 5044
        beats2:
            - 5644
    master:
      ports:
        wazuh:
          tcp:
            - 1514
          udp:
            - 1514
        playbook:
          tcp:
            - 3200
        mysql:
          tcp:
            - 3306
        navigator:
          tcp:
            - 4200
        kibana:
          tcp:
            - 5601
        redis:
          tcp:
            - 6379
        influxdb:
          tcp:
            - 8086
        osquery:
          tcp:
            - 8090
        cortex:
          tcp:
            - 9001
        elasticsearch_rest:
          tcp:
            - 9200
        elasticsearch_node:
          tcp:
            - 9300
        cortex_es_rest:
          tcp:
            - 9400
        cortex_es_node:
          tcp:
            - 9500
    minions:
      ports:
        acng:
            - 3142
        salt:
          tcp:
            - 4505
            - 4506
        registry:
          tcp:
            - 5000
        osquery:
          tcp:
            - 8080
        influxdb:
          tcp:
            - 8086
        wazuh:
          tcp:
            - 55000
    node:
      ports:
        elasticsearch_node:
          tcp:
            - 9300
    osquery_endpoint:
      ports:
        fleet:
          tcp:
            - 8090
    search_nodes:
      ports:
        redis:
          tcp:
            - 6379
        elasticsearch_node:
            - 9300
    sensor:
      ports:      
    wazuh_endpoint:
      ports:
        wazuh:
          tcp:
            - 1514
          udp:
            - 1514