See http://www.microsoft.com/windowsxp/expertzone/chats/transcripts/05_jan12 _win_fw.mspx
see if adding Ossec.exe to the firewall exception. I have a follow up. Can Ossec Windows agent start from a static port. Port assignment seems dynamic -----Original Message----- From: [email protected] [mailto:[EMAIL PROTECTED] On Behalf Of Martin Leung Sent: Thursday, August 10, 2006 12:10 PM To: [email protected] Subject: [ossec-list] Does ossec-agent on Windows require to listen at udp port 3911 Hi list, I found the following event log from an Ossec Windows agent: The Windows Firewall has detected an application listening for incoming traffic. Name: - Path: C:\Program Files\ossec-agent\ossec-agent.exe Process identifier: 2084 User account: SYSTEM User domain: NT AUTHORITY Service: Yes RPC server: No IP version: IPv4 IP protocol: UDP Port number: 3911 Allowed: No User notified: No Do I have to allow the traffic? Rgds. Martin
