# Network and Firewall Requirements

{% hint style="warning" %}
It's recommended to run MariaDB Enterprise Manager on an internal, secured network. Direct public exposure is not recommended.
{% endhint %}

Before installing MariaDB Enterprise Manager, ensure that your firewall and network rules allow traffic on all required ports. Proper connectivity is essential for the system to function correctly.

The following table details the necessary ports and their purposes.

| Service/Component             | Port   | Protocol | Traffic Direction | Purpose                                                                             |
| ----------------------------- | ------ | -------- | ----------------- | ----------------------------------------------------------------------------------- |
| **Enterprise Manager Server** | `8090` | HTTP/S   | Inbound           | **User Access**: Allows users to access the Enterprise Manager UI.                  |
| **Enterprise Manager Server** | `4318` | HTTP/S   | Inbound           | **Agent Metrics**: Receives metrics data pushed from the Enterprise Manager Agents. |
| **Enterprise Manager Agent**  | `4318` | HTTP/S   | Outbound          | **Agent Metrics**: Pushes metrics data to the Enterprise Manager Server.            |

{% hint style="info" %}
All ports listed are TCP. Ensure your firewall rules explicitly allow TCP traffic for the specified ports.
{% endhint %}

### Summary of Required Firewall Rules

For the current version of MariaDB Enterprise Manager, ensure the following rules are in place:

* From user workstations, allow traffic to the Enterprise Manager Server on TCP port `8090`.
* From agent hosts, allow traffic to the Enterprise Manager Server on TCP port `4318`.

<sub>*This page is: Copyright © 2025 MariaDB. All rights reserved.*</sub>

{% @marketo/form formId="4316" %}


---

# Agent Instructions: Querying This Documentation

If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://mariadb.com/docs/tools/mariadb-enterprise-manager/administration/deployment/network-and-firewall-requirements.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.