GFI LanGuard Agent

Computers running a GFI LanGuard Agent must meet the following hardware requirements:

Component	Requirement
Processor	1 GHz
Physical Storage	800MB are required for the installation & an additional 2GB are required during a scan to extract update archives.
RAM	25 MB dedicated to GFI LanGuard
Network bandwidth	1544 kbps

GFI LanGuard Relay Agent

A computer is eligible to be configured as a Relay Agent when:

• The computer is online and has good uptime (an offline Relay Agent incapacitates its clients)
• Has fast network access to computers connected to it
• Has the required disk space to allow caching.

Computers configured as Relay Agents must meet the following hardware requirements:

Component	1 to 100 Clients	100 to 500 Clients	500 to 1,000 Clients
Processor	2 GHz Dual Core	2 GHz Dual Core	2.8 GHz Dual Core
Physical Storage	5 GB	10 GB	10 GB
RAM	2 GB	2 GB	4 GB
Network bandwidth	100 Mbps	100 Mbps	1 Gbps

GFI LanGuard components can be installed on any computer that meets the software requirements listed in this section. For more information, refer to:

Supported operating systems (32-bit/64-bit)

The following table lists operating systems that GFI LanGuard Agent and GFI LanGuard Relay Agent can be installed on:

Windows® Operating System	GFI LanGuard Agent	GFI LanGuard Relay Agent
Windows Server 2022
Windows 11 Professional/Enterprise
Windows Server 2019
Windows Server 2016
Windows Server 2012 (including R2)
Windows Server 2008 R2 Standard/Enterprise (latest SP)
Windows Server 2008 Standard/Enterprise (latest SP)
Windows Server 2003 Standard/Enterprise
Windows 10 Professional/Enterprise
Windows 8/8.1 Professional/Enterprise
Windows 7 Professional/Enterprise/Ultimate (latest SP)
Windows Vista Business/Enterprise/Ultimate
Windows XP Professional (latest SP)
Small Business Server 2011
Small Business Server 2008 Standard
Small Business Server 2003 (latest SP)

This section provides you with information about the required firewall ports and protocols settings for:

• GFI LanGuard and Relay Agents
• GFI LanGuard Agent and Agent-less computers

GFI LanGuard and Relay Agents

Configure your firewall to allow inbound connections on TCP port 1072, on computers running:

• GFI LanGuard
• Relay Agents

To manually configure the communication port:

1. Launch GFI LanGuard.

2. Click Configuration tab > Manage Agents.

3. From the right pane, click Agents Settings.

4. From the Agents Settings dialog, specify the communication port in the TCP port text box.

5. Click OK.

GFI LanGuard Agent and Agent-less computers

Communications between GFI LanGuard and managed computers (Agents and Agent-less), are done using the ports and protocols below. The firewall on managed computers needs to be configured to allow inbound requests on the following ports:

TCP Ports	Protocol	Description
22	SSH	Auditing LinuxAn open source operating system that is part of the Unix operating system family. systems.
135	DCOM	Dynamically assigned port.
137	NetBIOS	Computer discovery and resource sharing.
138	NetBIOS	Computer discovery and resource sharing.
139	NetBIOS	Computer discovery and resource sharing.
161	SNMPSimple Network Management Protocol is a protocol for network management. It is used to collect information from network devices, such as servers, printers, hubs, switches, and routers.	Used for computer discovery. GFI LanGuard supports SNMPv1 and SNMPv2c. SNMPv3 and SNMP over TLS / DTLS are not supported.
445	SMB	Used while: Auditing computers Agent management Patch deployment.

AntivirusA software countermeasure that detects malware installed on a computer without the user's knowledge. & backup software can cause GFI LanGuard to malfunction if it is denied access to some of its files.

Add exclusions that prevent antivirus & backup software from scanning or backing up the following folder on the GFI LanGuard server, Agents, Relay Agents and the GFI LanGuard Central Management Server:

<system drive>\ProgramData\GFI\