How to check if port 6433 is open on your network

To check if Port 6433 is open—specifically between your Search Agents and the Discovery Agent—you should use the following methods depending on your access level.

1. The Quickest Way (From a Search Agent)

Run this command from a Search Agent (Worker) machine to see if it can "see" the Discovery Agent's queue port.

• PowerShell:
  Test-NetConnection -ComputerName [Discovery_Agent_IP] -Port 6433
• What to look for:
• • TcpTestSucceeded : True — The port is open and the network path is clear.
  • TcpTestSucceeded : False — The port is blocked by a firewall (Windows or Network) or the service isn't listening.

2. Verify on the Discovery Agent (Is it listening?)

If the test above fails, log into the Discovery Agent machine to see if the pgBouncer service is actually listening on that port.

• Command Prompt (Admin):
  netstat -ano | findstr :6433
• What to look for:
• • If you see TCP 0.0.0.0:6433 LISTENING, the service is ready for connections.
  • If you see nothing, the pgBouncer (Spirion) service is likely stopped or failed to start.

3. Check the Windows Firewall (Discovery Agent)

Even if the service is listening, the Windows Firewall might be blocking external traffic.

• PowerShell (Admin):
  Get-NetFirewallRule -DisplayName "*Spirion*" | Select-Object DisplayName, Enabled, Direction, Action
• Manual Check:
• 1. Go to Control Panel > Windows Defender Firewall > Advanced Settings.
  2. Click Inbound Rules.
  3. Look for a rule allowing TCP 6433.
  4. 1. If it doesn't exist, create a "New Rule" for Port 6433.

4. Network-Level Check (Telnet/Port Query)

If the Windows Firewall is open but the Test-NetConnection still fails, a physical firewall or security appliance (like Palo Alto or Cisco) between the two servers is likely blocking the traffic.

• Using Telnet (if installed):
  telnet [Discovery_Agent_IP] 6433
• • If the screen goes blank: The port is open.
  • If the message "Connect failed" appears: The port is closed.

Why Port 6433?

In the Spirion SDP architecture, Port 5433 is the direct port for the PostgreSQL database, but Port 6433 is the port for pgBouncer.

• Search Agents MUST connect to 6433.
• Connecting directly to 5433 from remote agents can cause the database to run out of connections and crash the Discovery Agent.

Summary: If Test-NetConnection returns False, your distributed scan will continue to fail with the "Unable to find job queue" error until Port 6433 is opened.