We use cookies to ensure that we give you the best experience on our website.  Visit our Privacy Policy to learn more. If you continue to use this site, we will assume that you are okay with it.

Your choices regarding cookies on this site.
Your preferences have been updated.
In order for the changes to take effect completely please clear your browser cookies and cache. Then reload the page.

Werk #10197: Windows Agent can configure Windows Firewall

ComponentChecks & Agents
TitleWindows Agent can configure Windows Firewall
Date2019-11-13 09:26:02
Checkmk EditionCheckmk Raw Edition (CRE)
Checkmk Version1.6.0p7,1.7.0i1
LevelProminent Change
ClassNew Feature
CompatibilityCompatible - no manual interaction needed

Previously the Windows Firewall could prevent a connection to the Windows Agent (this is the default behavior) thus forcing a system administrator to configure potentially every host with Windows Agent installed.

Now the Windows Agent can configure the Windows Firewall rules that are needed for the agent.

There are two possibilities:

For Windows Agent service you may edit Checkmk configuration file adding at the end:

system:
firewall:
mode: configure

Then restart the agent service or trigger a agent configuration reload.

You could also execute the agent exe to set the rules for you. The command \path\to\check_mk_agent.exe fw -configure will configure the firewall correctly for \path\to\check_mk_agent.exe.

It is also possible to make the agent remove the firewall configuration by setting the mode option to "clear" in the agent configuration file or by executing the command \path\to\check_mk_agent.exe fw -clear.