Werk #10197: Windows Agent can configure Windows Firewall

Previously the Windows Firewall could prevent a connection to the Windows Agent (this is the default behavior) thus forcing a system administrator to configure potentially every host with Windows Agent installed.

Now the Windows Agent can configure the Windows Firewall rules that are needed for the agent.

There are two possibilities:

For Windows Agent service you may edit Checkmk configuration file adding at the end:

system:
  firewall:
    mode: configure

Then restart the agent service or trigger a agent configuration reload.

You could also execute the agent exe to set the rules for you. The command \path\to\check_mk_agent.exe fw -configure will configure the firewall correctly for \path\to\check_mk_agent.exe.

It is also possible to make the agent remove the firewall configuration by setting the mode option to "clear" in the agent configuration file or by executing the command \path\to\check_mk_agent.exe fw -clear.

To the list of all Werks