Event Logs & Windows Firewall - Enabled rule and still no access
Two Windows Servers, one old and one new. The old one I have EA able to connect & retrieve Event Log. New server I get RPC unavailable error.
Both servers have the following enabled in the firewall:
- Remote Event Log Management (NP-In)
- Remote Event Log Management (RPC)
- Remote Event Log Management (RPC-EPMAP)
- Remote Event Monitor (RPC)
- Remote Event Monitor (RPC-EPMAP)
I suspect it would be the Windows firewall, as I disable it on the server then EA is able to collect and grab Event Log. When I re-enable and do scan I will get the error.
The probable reason and the remedial action is: Probable cause: The device machine RPC (Remote Procedure Call) port is blocked by any other Firewall. Solution: Unblock the RPC ports in the Firewall.
I don't know what other ports if any would need to be open, and do not know or understand why one is working and the other is not.