I am trying to install or update the EventSentry agent on a remote computer that is located behind a firewall or router. What ports do I need to open on the firewall for the agent install or update to succeed?

Article ID: 25
Category: Installation
Updated: 2019-01-22

EventSentry uses the standard Windows ports used for RPC/SMB File sharing to install/deploy, update, and manage the agent. To enable this feature to work with a firewall you should only have to open up the following inbound port on the remote agent:

Port 445, TCP (inbound)

If you are using the Windows Firewall then you may need to allow the default inbound rule called "File and Print Sharing (SMB-IN)".

Alternatively you can also manually install EventSentry on the remote machine without making changes to the firewall configuration.


To install the agent without the setup application (recommended):

The easiest option to manually install the agent is to create an MSI file, which is available for EventSentry 3.3 and newer: https://www.eventsentry.com/documentation/help/html/?installationmanualmsi.htm

If you are unable to use an MSI file, you can follow the instructions in KB-352 to manually install the agent by using EXE and dll files.
If you have EventSentry 3.2, please follow KB-297 instead.
If you have EventSentry 3.1 and older, please follow KB-99 instead.



To install the agent using the setup application (not recommended):

  • Export the configuration on the machine running the management application (with Home -> Export)
  • Transfer the configuration file to the remote machine
  • Install EventSentry with the setup application, and make sure that you only select the management console, and de-select ALL other components.
  • Import the previously exported configuration file (with Home -> Import)
  • Restart the EventSentry agent