Prerequisites

This topic deals with the following pre-requisites for setting up Firewall Analyzer in your enterprise.

Ports to be Freed

Firewall Analyzer requires the following ports to be free:

Port Number	Usage
8500	This is the default web server port. You will access the Firewall Analyzer server from a web browser using this port number. You may change this port during installation.
514, 1514	These are the default listener ports on which Firewall Analyzer listens for incoming logs exported from devices. You can add more ports on which Firewall Analyzer can listen for incoming logs.
33336	This is the port used to connect to the MySQL database in Firewall Analyzer

Look up Changing Default Ports for help on changing the default ports used by Firewall Analyzer

Apart from the System Requirements, the following setup would ensure optimal performance from Firewall Analyzer:

Run Firewall Analyzer on a separate, dedicated PC or server. The software is resource-intensive, and a busy processor may cause problems in collecting logs.
Use the MySQL bundled with Firewall Analyzer that runs on port 33336. You need not start another separate instance of MySQL.

Changing the default MySQL port:

Edit the mysql-ds.xml file present in the <FirewallAnalyzer_Home>/server/default/deploy directory.
Change the port number in the following line to the desired port number:
<connection-url>jdbc:mysql://localhost:33336/firewall</connection-url>
Save the file and restart the server.

Changing the default web server port:

Edit the sample-bindings.xml file present in the <FirewallAnalyzer_Home>/server/default/conf directory.
Change the port number in the following line to the desired port number:
<binding port="8500"/>
Save the file and restart the server.