Description
Most current Linux platforms have a firewall enabled by default.
The Linux agent deployment works if SSH is open and allowed (which it is by default). However, SSH is only used for Agent Deployemnt, and once the agent is deployed, the Core Server may not have access to the Linux Agent services.
This means the Core Server will not be able to contact the LANDesk agent services after deployment of the Linux agent.
Cause
As of 8.8 SP2, the LANDesk agent does NOT currently auto-populate the Linux firewall with allowed ports.
Resolution
The following ports must be enabled.
| Agent Function | TCP | UDP |
|---|---|---|
| Agent Deployment | 22 (SSH) | n/a |
| Management Agent (cba8) | 9595 (Ping Discovery Service) | 9595 (Ping Discovery Service) |
| Messaging Sytem (msgsys) | 9594 (Messaging System) | n/a |
| LANDesk Management Agent | 9593 (cba8) | n/a |
| LANDesk Gateway | 9592 (LDGateway - Exists but is not currently in use) | n/a |
The following is a screen shot of these settings on a Linux Agent.
