Werk #10197: Windows Agent can configure Windows Firewall

Component Checks & Agents
Title Windows Agent can configure Windows Firewall
Date Nov 13, 2019
Checkmk Editon Checkmk Raw (CRE)
Checkmk Version 2.0.0i1 1.6.0p7
Level Prominent Change
Class New Feature
Compatibility Compatible - no manual interaction needed

Previously the Windows Firewall could prevent a connection to the Windows Agent (this is the default behavior) thus forcing a system administrator to configure potentially every host with Windows Agent installed.

Now the Windows Agent can configure the Windows Firewall rules that are needed for the agent.

There are two possibilities:

For Windows Agent service you may edit Checkmk configuration file adding at the end:

mode: configure

Then restart the agent service or trigger a agent configuration reload.

You could also execute the agent exe to set the rules for you. The command \path\to\check_mk_agent.exe fw -configure will configure the firewall correctly for \path\to\check_mk_agent.exe.

It is also possible to make the agent remove the firewall configuration by setting the mode option to "clear" in the agent configuration file or by executing the command \path\to\check_mk_agent.exe fw -clear.

To the list of all Werks