I see that ports 22 for ssh and 161 for snmp are needed but which ports are needed for Windows auditing and AD discovery? Our open-audit installation is linux.
Right :) I guess the whole WMI thing is DCOM based. But it would be nice to know if the whole DCOM Port range is needed or only a few.
From what I have read, DCOM uses any port in that range, deliberately randomising it.