ossec

wazuh-docker/single-node/config/wazuh_cluster/wazuh_manager.conf

@@ -34,7 +34,13 @@
     <connection>syslog</connection>
     <port>514</port>
     <protocol>udp</protocol>
-    <allowed-ips>0.0.0.0/0</allowed-ips>
+    <allowed-ips>172.16.22.253/24</allowed-ips>
+    <allowed-ips>172.16.61.254/24</allowed-ips>
+    <allowed-ips>172.17.10.253/24</allowed-ips>
+    <allowed-ips>172.16.164.254/24</allowed-ips>
+    <allowed-ips>172.16.162.1/24</allowed-ips>
+    <allowed-ips>172.16.160.253/24</allowed-ips>
+    <allowed-ips>172.16.165.254/24</allowed-ips>
   </remote>
 
   <!-- Policy monitoring -->