What Ports are used by EDR Server?

Products

• Carbon Black EDR (formerly Cb Response)

Issue/Introduction

What ports are being used by the EDR Server Services?

Environment

• EDR Server: All Versions

Resolution

Daemon Name	Port Number	Log Location
cb-pgsql	5002	/var/log/cb/pgsql/
cb-datagrid	5701	/var/log/cb/datagrid/
cb-redis	6379	/var/log/cb/redis
cb-rabbitmq	4369 & 25004	/var/log/cb/rabbitmq
cb-solr	8080	/var/log/cb/solr
cb-nginx	443 & 80 (Default)	/var/log/cb/nginx
cb-datastore	9000	/var/log/cb/datastore
cb-coreservices	5000	/var/log/cb/coreservices
cb-sensorservices	6500 & 6501	/var/log/cb/sensorservices
cb-liveresponse	5600	/var/log/cb/liveresponse
cb-allianceclient	None	/var/log/cb/allianceclient
cb-enterprised	5001 & 5006	/var/log/cb/enterprise
cb-supervisord	None	/var/log/cb/supervisord

Additional Information

• In a clustered environment, all ports must be accessible between all server nodes. 
• In a clustered environment that has external communications that allow sensors to check in, all nodes must allow communication on ports 443. 
• For standalone servers, outside communication can be locked down as long as the associated sensors are able to check in using ports 443 .