IBM Security QRadar SOAR

 View Only

  • 1.  Resilient App Host connections

    Posted Tue November 17, 2020 05:05 AM
    Hi All,

    I have a question about APP Host and Resilient ports connection.

    The documentation says:

    "Ports 6443 and 10250 (both TCP) and 8472 are accessible. If installing the App Host virtual application, also make sure TCP ports 22 and 443 are accessible."

    My question is that these ports have to be accessible from both directions? If not wich direction is it?

    Thank you.

    Regards,
    Adam

    ------------------------------
    Adam
    ------------------------------


  • 2.  RE: Resilient App Host connections

    Posted Tue November 17, 2020 10:36 AM
    Hello Adam,

    Thank you for your question. This actually looks like a minor mistake in the documentation. I just raised the issue with the team and we are working to correct it.

    Ports 6443, 10250, and 8472 do not need to be accessible outside of the appliance itself.

    Port 22 should be inbound to allow SSH connections to the appliance. Ports 443 and 65000/650001 should be outbound to allow the connection to Resilient.

    Best wishes,
    Brian

    ------------------------------
    Brian Reid
    ------------------------------

    Original Message


  • 3.  RE: Resilient App Host connections

    Posted Wed November 18, 2020 01:40 AM
    Hello Brian,

    I see.

    All right.

    Thank you for your quick answer.

    Regards,
    Adam

    ------------------------------
    Adam
    ------------------------------

    Original Message


  • 4.  RE: Resilient App Host connections

    Posted Wed November 18, 2020 08:53 AM
    You're welcome, Adam.

    Perhaps you caught my typo, but the outbound ports should be 65000/65001. I added an extra zero in my previous reply.

    ------------------------------
    Brian Reid
    ------------------------------

    Original Message