Which ports do I need to open for collecting logs from windows servers?
Far as I know it's 5985 or 5986, bi-directional, between the windows event source and rsa sa log collector. Do I also need to open port 80 or 443, bi-directional?
Also, is it TCP or UDP?
Please let me know what it is for port 514 as well - TCP or UDP?