Network and Firewall Requirements

It's recommended to run MariaDB Enterprise Manager on an internal, secured network. Direct public exposure is not recommended.

Before installing MariaDB Enterprise Manager, ensure that your firewall and network rules allow traffic on all required ports. Proper connectivity is essential for the system to function correctly.

The following table details the necessary ports and their purposes.

Service/Component	Port	Protocol	Traffic Direction	Purpose
Enterprise Manager Server	8090	HTTP/S	Inbound	User Access: Allows users to access the Enterprise Manager UI.
Enterprise Manager Server	4318	HTTP/S	Inbound	Agent Metrics: Receives metrics data pushed from the Enterprise Manager Agents.
Enterprise Manager Agent	4318	HTTP/S	Outbound	Agent Metrics: Pushes metrics data to the Enterprise Manager Server.

All ports listed are TCP. Ensure your firewall rules explicitly allow TCP traffic for the specified ports.

Summary of Required Firewall Rules

For the current version of MariaDB Enterprise Manager, ensure the following rules are in place:

• From user workstations, allow traffic to the Enterprise Manager Server on TCP port 8090.

• From agent hosts, allow traffic to the Enterprise Manager Server on TCP port 4318.

_{This page is: Copyright © 2025 MariaDB. All rights reserved.}