Skip to main content

Nutanix Target Requirements

Netwrix Access Analyzer (formerly Enterprise Auditor) can execute Access Auditing (FSAA) and/or Sensitive Data Discovery Auditing scans on Nutanix Appliances. The Netwrix Activity Monitor can be configured to monitor activity on Nutanix Appliances and make the event data available for Access Analyzer Activity Auditing (FSAC) scans.

Access & Sensitive Data Auditing Permissions​

The credentials used by the Access Analyzer scans must have the following permissions on the target host:

  • Group membership in the role Backup Admin: Backup Access Only

See the Nutanix Appliance Access & Sensitive Data Auditing Configuration topic for additional information.

NOTE: These permissions are in addition to those needed to either deploy applet scans for running scans in proxy mode with applet or installing the File System Proxy Service Permissions for running scans in proxy mode as a service. See the File System Scan Options topic for additional information.

Access & Sensitive Data Auditing Port Requirements​

The firewall ports required by Access Analyzer for Access Auditing (FSAA) and/or Sensitive Data Discovery Auditing scans are based on the File System scan mode to be used. See the File System Scan Options topic for additional information.

Activity Auditing Permissions​

The Netwrix Activity Monitor can be configured to monitor activity on Nutanix devices. See the Nutanix Files Activity Auditing Configuration topic for instructions.

Activity Auditing Port Requirements​

Firewall settings depend on the type of environment being targeted. The following firewall settings are required for communication between the Agent server and the Netwrix Activity Monitor Console:

Communication DirectionProtocolPortsDescription
Activity Monitor to Agent ServerTCP4498Agent Communication

The Windows firewall rules need to be configured on the Windows server, which require certain inbound rules be created if the scans are running in applet mode. These scans operate over a default port range, which cannot be specified via an inbound rule. For more information, see the Microsoft Connecting to WMI on a Remote Computer article.

Additional Firewall Rules for Nutanix Appliances

The following firewall settings are required for communication between the Activity Monitor Activity Agent server and the target Nutanix device:

Communication DirectionProtocolPortsDescription
Activity Agent Server to NutanixTCP9440Nutanix API
Nutanix to Activity Agent ServerTCP4501Nutanix Event Reporting

Protect the port with a username and password. The credentials will be configured in Nutanix.

Additional Firewall Rules for Integration between Access Analyzer and Activity Monitor

Firewall settings are dependent upon the type of environment being targeted. The following firewall settings are required for communication between the agent server and the Access Analyzer Console:

Communication DirectionProtocolPortsDescription
Access Analyzer to Agent ServerTCP445SMB, used for Agent Deployment
Access Analyzer to Agent ServerTCPPredefinedWMI, used for Agent Deployment