adding additional syslog port to Esxi Firewall

[smokey008uk]

Hello

Is it possible to add an extra port so syslog can talk on a port other than 514 and 1514 using powercli ? or via esxcli without using VI

get-vmhost vmhost1.customer.local| Get-VMHostFirewallException | where {$_.Name.StartsWith('syslog')}

Name                 Enabled IncomingPorts  OutgoingPorts  Protocols  ServiceRunning

----                 ------- -------------  -------------  ---------  --------------

syslog               True                   514, 1514      UDP, TCP

while i can view what is currently allowed , I cannot seem to change it , apart from going into host and VI edit on an xml file. would rather not have to do this option for 40 hosts spread around multiple Vcenters

any one any tips or pointers , seems going beyond the Default is a we bit tricky

[kermic]

First impression, this is not going to be a walk in the park

Have you looked at these: Create ESXi Host firewall rules using PowerCli | PS C:>(Get-Virtual).info and Adding bespoke firewall rules to ESXi - CormacHogan.com

They seem to be covering your issue. Note the comment in the Cormac's post which might help you in making changes persistent after host updates / patching.

Another thing I would consider if I had Ent+ license - Host Profiles, I guess they could do the trick as well.

Hope this helps.