Greetings: Since upgrading to ossec 1.5 we have several agent servers that can no longer communicate with the ossec control server.
If iptables on the agent servers is off, communication works. Turning on ipables on the agents, communication fails. In the past, just having UDP 1514 open to/from the ossec control server was enough. Are there any other ports, including any ephemeral ones that need to be open? Thank you.
