SolarWinds LEM Port and Firewall Requirements
SolarWinds LEM Port and Firewall Requirements
SolarWinds LEM Port and Firewall Requirements
Overview
This page lists the firewall ports that you need to open to allow communication with SolarWinds LEM. Any firewalls that
stand between any two points of communication should allow inbound and/or outbound traffic across the specified ports
to ensure that LEM works properly.
In the table, "inbound" assumes that the LEM VM is behind the firewall, and that firewall rules allow network
traffic through the firewall to the LEM VM.
Environment
All Versions of LEM.
If you use multiple SolarWinds products, see Port requirements for all SolarWinds products.
Details
Port # Protocol Service Direction Description
Copyright © 1999-2017 SolarWinds Worldwide, LLC. All rights reserved worldwide. No part of this document may be reproduced by any
means nor modified, decompiled, disassembled, published or distributed, in whole or in part, or translated to any electronic medium or other
means without the written consent of SolarWinds. All right, title, and interest in and to the software and documentation are and shall remain 1
the exclusive property of SolarWinds and its respective licensors.
Standard Windows file sharing ports (NetBIOS Session
Service, Microsoft SMB) that LEM uses to export debug
NetBIOS, files, syslog messages, and backup files.
139, 445 TCP Bidirectional
SMB
The LEM Remote Agent Installer also uses these ports
to install Agents on Microsoft Windows hosts across your
network.
Copyright © 1999-2017 SolarWinds Worldwide, LLC. All rights reserved worldwide. No part of this document may be reproduced by any
means nor modified, decompiled, disassembled, published or distributed, in whole or in part, or translated to any electronic medium or other
means without the written consent of SolarWinds. All right, title, and interest in and to the software and documentation are and shall remain 2
the exclusive property of SolarWinds and its respective licensors.
nDepth traffic sent from nDepth to the LEM VM
8983 TCP nDepth Inbound
containing raw (original) log data.
LEM
LEM reports application traffic used to gather LEM
9001 TCP reports Bidirectional
teports data on the LEM VM.
application
Note: LEM no longer uses the port listed in the following table.
Port 5433 is no longer used. Previously, this port carried traffic from
LEM the SolarWinds LEM reports application to the SolarWinds LEM VM.
5433 TCP Inbound
Reports This was used by versions prior to LEM 5.6, for which support ended
December 2015.
URLs
• To receive connector updates using the automatic connector update function, LEM needs access to the following
URL:
◦ http://downloads.solarwinds.com
• To use the Threat Feeds function and the Automatic Connector Update function In LEM 6.2 and later, LEM needs
access to the following URL:
◦ https://rules.emergingthreats.net/fwrules/
Copyright © 1999-2017 SolarWinds Worldwide, LLC. All rights reserved worldwide. No part of this document may be reproduced by any
means nor modified, decompiled, disassembled, published or distributed, in whole or in part, or translated to any electronic medium or other
means without the written consent of SolarWinds. All right, title, and interest in and to the software and documentation are and shall remain 3
the exclusive property of SolarWinds and its respective licensors.
Copyright © 1999-2017 SolarWinds Worldwide, LLC. All rights reserved worldwide. No part of this document may be reproduced by any
means nor modified, decompiled, disassembled, published or distributed, in whole or in part, or translated to any electronic medium or other
means without the written consent of SolarWinds. All right, title, and interest in and to the software and documentation are and shall remain 4
the exclusive property of SolarWinds and its respective licensors.