Windows Zabbix agent v6.2.3 - Problem with install with Firewall service off

[cchk]

Hi,

Just want to report a minor issue that while installing the zabbix agent (via msexec.exe), it will fail when the Firewall service (MpsSvc) is Stopped.

The MSI log contains the following:
ExecFirewallExceptions: Error 0x800706d9: failed to add/update port exception for name 'Zabbix Agent listen port' on port 10050, protocol 6

The workaround is to start the Firewall service service (Start-Service MpsSvc), let Zabbix agent install and add a rule, then stop the firewall service (Stop-Service MpsSvc -Force).

Tested with Agent v6.2.3, on Windows Server 2012 R2. I imagine it impacts higher OS' too.

[guille.rodriguez]

I've solved creating a GPO that allow Zabbix Port.

- Create a group called like m-ZabbixAgentComputers, add only machines that you want to run Zabbix.
- Create a GPO, this GPO autoinstall zabbix (via script) and add firewall exception rule tcp/10050

[guille.rodriguez]

cchk Or can just execute this line after install only for domain network in a Powershell Script

New-NetFirewallRule -DisplayName "Allow inbound 10050" -Direction Inbound -Protocol TCP -Action Allow -LocalPort 10050 -Profile Domain

or for Any network

New-NetFirewallRule -DisplayName "Allow inbound 10050" -Direction Inbound -Protocol TCP -Action Allow -LocalPort 10050 -Profile Any