Prerequisites for the File and FTP Monitoring Agent
This page describes the prerequisites to successfully install and run the Nodinite File Monitoring Agent to achieve MFT Monitoring.
Instances of this agent can be installed on-premise using TCP/IP for local network access and/or in the cloud/off-site using Service Bus Relaying (see also the external link for additional information MicrosoftServiceBusRelayingLink).
We recommend that you keep this agent close to the Nodinite Core Services. This documentation covers local network setup (usually on the Nodinite application server)
Verified | Topic |
---|---|
Software Requirements | |
What Windows User Rights does the File and FTP Monitoring agent require? | |
What Firewall settings are required for the File and FTP Monitoring agent? |
Software Requirements
Product | ||
---|---|---|
Windows Server | Windows 2022Windows 2019Windows 2016Windows 2012 R2Windows 2012 | |
.NET Framework | .NET Framework 4.8 or later New 6.0Our recommendation is .NET Framework 4.8.1 or later |
Versions 6.0 and later make use of the .NET Framework 4.8 or later.
Versions 5.4 and subsequently make use of the .NET Framework 4.6.2 or later.
Versions before 5.4 make use of the .NET Framework 4.5.2 or later.
What Windows User Rights does the File and FTP Monitoring agent require?
The agent is installed as a Windows Service usually on the Nodinite application server. Virtual machines are supported.
- Local named account or domain account (preferred).
- Access and run-time rights.
- Follow the 'How to set logon as a Windows service right' user guide for detailed instructions.
For each Folder being monitored you may need to provide alternate credentials, review the Configuration user guide for additional details.
least privileges (basic usage)
Read permission to the folder where to check for files (and all its child folders if the 'Include child folders' option is checked)
What Firewall settings are required for the File and FTP Monitoring agent?
The File Monitoring Agent has both inbound and outbound communication:
- Between the Monitoring Service and the File Monitoring Agent
- Between the File Monitoring Agent and any of the following file based services
- SMB Services (Typically Windows file shares)
- NFS Services (Typically Linux file shares)
- FTP/FTPS
- SFTP
![NOTE]
The exact ports in use, may vary with your policies and current configuration/reality.
1. Between the Monitoring Service and the File Folder Monitoring agent
The following ports must be allowed on the Windows server where the agent is installed and running :
Port | Name | Inbound | Outbound | TCP | UDP | Comment |
---|---|---|---|---|---|---|
53 | DNS | The Agent needs to know where your other servers/services are (can sometimes optionally be solved using entries in the local hosts file) |
And further with 'Option 1' or 'Option 2' as documented next:
Option 1 (Local network)
Port | Name | Inbound | Outbound | TCP | UDP | Comment |
---|---|---|---|---|---|---|
8000 | RPC | Communication is initiated by the Monitoring Service |
Option 2 (Cloud/Hybrid)
Use Service Bus Relayed connections when Nodinite and the agent are on totally different networks.
Nodinite uses the same principle technique as the On-Premise data gateway, see 'Adjust communication settings for the on-premises data gateway' user guide.
Port | Name | Inbound | Outbound | TCP | UDP | Comment |
---|---|---|---|---|---|---|
443 | HTTPS | Secure outbound traffic | ||||
5671, 5672 | Secure AMQP | |||||
9350 - 9354 | Net.TCP |
2. Between the File Monitoring Agent and file-based services
Additional firewall requirements may exist depending on the usage of the Samba protocol, FTP, FTPS, SFTP, Certificates, NTLM, Kerberos, SUN RPC.
SMB
Port | Name | Inbound | Outbound | TCP | UDP | Comment |
---|---|---|---|---|---|---|
53 | DNS | The Agent needs to know where your other servers/services are (can sometimes optionally be solved with user-defined entries in the hosts file in each Windows server instance), review the following 'Microsoft' user guide |
||||
135-139 | SMB | Microsoft file sharing SMB | ||||
445 | SMB | Direct-hosted SMB traffic |
FTP/FTPS
Port | Name | Inbound | Outbound | TCP | UDP | Comment |
---|---|---|---|---|---|---|
21 | FTP/FTPS | Default |
SFTP
Port | Name | Inbound | Outbound | TCP | UDP | Comment |
---|---|---|---|---|---|---|
22 | SFTP (SSH) | Default secure port | ||||
20 | SFTP (SSH) | Default for download |
NFS
Port | Name | Inbound | Outbound | TCP | UDP | Comment |
---|---|---|---|---|---|---|
111 | ||||||
665-1024 | when using privileged ports option | |||||
1039 | ||||||
1047 | ||||||
1048 | ||||||
2049 |
Next Step
Add or manage Monitoring Agent
Install File Monitoring Agent