https://community.splunk.com/t5/Security/Allow-Splunk-Server-out-through-firewall/m-p/98008#M3202 <P>So that allows the splunk server, to access the community? That looks more like what the hosts use to connect back to the splunk server, correct?</P> Wed, 17 Apr 2013 16:27:50 GMT LandersFiscal 2013-04-17T16:27:50Z https://community.splunk.com/t5/Security/Allow-Splunk-Server-out-through-firewall/m-p/98006#M3200 <P>Hi guys, my apologies upfront for the question, I've searched and I can't seem to find the answer to this.</P> <P>I'm putting splunk behind our PCI firewall, I need to know the IP's/Ports are needed for it to get out to function "normally". IE, if I click on the find more apps online, that it can. I can't do an access list with ANY eq 80 or ANY eq 443 I have to have specific IP's. Thanks in advance!</P> Wed, 17 Apr 2013 15:33:17 GMT https://community.splunk.com/t5/Security/Allow-Splunk-Server-out-through-firewall/m-p/98006#M3200 LandersFiscal 2013-04-17T15:33:17Z https://community.splunk.com/t5/Security/Allow-Splunk-Server-out-through-firewall/m-p/98007#M3201 <P>8000, 9996, 8089. The ip will be whatever you assigned your servers, forwarders, peers, etc.</P> Wed, 17 Apr 2013 16:16:44 GMT https://community.splunk.com/t5/Security/Allow-Splunk-Server-out-through-firewall/m-p/98007#M3201 Strype 2013-04-17T16:16:44Z https://community.splunk.com/t5/Security/Allow-Splunk-Server-out-through-firewall/m-p/98008#M3202 <P>So that allows the splunk server, to access the community? That looks more like what the hosts use to connect back to the splunk server, correct?</P> Wed, 17 Apr 2013 16:27:50 GMT https://community.splunk.com/t5/Security/Allow-Splunk-Server-out-through-firewall/m-p/98008#M3202 LandersFiscal 2013-04-17T16:27:50Z https://community.splunk.com/t5/Security/Allow-Splunk-Server-out-through-firewall/m-p/98009#M3203 <P>Okay I see. I must have misread. I assumed you were using a distributed architecture and that the firewalls were on the servers.</P> Wed, 17 Apr 2013 17:01:18 GMT https://community.splunk.com/t5/Security/Allow-Splunk-Server-out-through-firewall/m-p/98009#M3203 Strype 2013-04-17T17:01:18Z https://community.splunk.com/t5/Security/Allow-Splunk-Server-out-through-firewall/m-p/98010#M3204 <P>Splunk web will take the IP of the machine.</P> Wed, 17 Apr 2013 17:02:20 GMT https://community.splunk.com/t5/Security/Allow-Splunk-Server-out-through-firewall/m-p/98010#M3204 Strype 2013-04-17T17:02:20Z