Lab 10.1 Wazuh & Windows logging - devinziegler/Devin-Tech-Journal GitHub Wiki

Firewall changes

Make Port Group for AD Services

set firewall group port-group <GROUPNAME> port <PORTNUMBER>

AD ports are:

  • 53, 389, 636, 88, 445, 135, 49152-65535

🔗 To install AD and promote a system, reference this article Active Directory Refresh

Issues or setbacks

  • To install wazuh on MGMT01, a temporary firewall rule can be made. However all Wazuh files can be downloaded to a system with internet and then sent over to mgmt02, for example, RDP from Traveler to MGMT02.
⚠️ **GitHub.com Fallback** ⚠️