---
title: "How to check if port 6433 is open on your network"
url: "https://dm0bkdes5q7a2ls.productfruits.help/en/article/how-to-check-if-port-6433-is-open-on-your-network"
language: "en"
last_updated: "2026-03-26T19:59:11.019Z"
---

# How to check if port 6433 is open on your network

To check if **Port 6433** is open—specifically between your **Search Agents** and the **Discovery Agent**—you should use the following methods depending on your access level.

### 1\. The Quickest Way (From a Search Agent)

Run this command from a **Search Agent** (Worker) machine to see if it can "see" the Discovery Agent's queue port.

-   **PowerShell:**  
    `Test-NetConnection -ComputerName [Discovery_Agent_IP] -Port 6433`
-   **What to look for:**
-   -   **TcpTestSucceeded : True** — The port is open and the network path is clear.
    -   **TcpTestSucceeded : False** — The port is blocked by a firewall (Windows or Network) or the service isn't listening.

### 2\. Verify on the Discovery Agent (Is it listening?)

If the test above fails, log into the **Discovery Agent** machine to see if the `pgBouncer` service is actually listening on that port.

-   **Command Prompt (Admin):**  
    `netstat -ano | findstr :6433`
-   **What to look for:**
-   -   If you see `TCP 0.0.0.0:6433 LISTENING`, the service is ready for connections.
    -   If you see **nothing**, the `pgBouncer (Spirion)` service is likely stopped or failed to start.

### 3\. Check the Windows Firewall (Discovery Agent)

Even if the service is listening, the Windows Firewall might be blocking external traffic.

-   **PowerShell (Admin):**  
    `Get-NetFirewallRule -DisplayName "*Spirion*" | Select-Object DisplayName, Enabled, Direction, Action`
-   **Manual Check:**
-   1.  Go to **Control Panel > Windows Defender Firewall > Advanced Settings**.
    2.  Click **Inbound Rules**.
    3.  Look for a rule allowing **TCP 6433**.
    4.  1.  If it doesn't exist, create a "New Rule" for Port 6433.

### 4\. Network-Level Check (Telnet/Port Query)

If the Windows Firewall is open but the `Test-NetConnection` still fails, a physical firewall or security appliance (like Palo Alto or Cisco) between the two servers is likely blocking the traffic.

-   **Using Telnet (if installed):**  
    `telnet [Discovery_Agent_IP] 6433`
-   -   *If the screen goes blank:* The port is **open**.
    -   *If the message "Connect failed" appears:* The port is **closed**.

* * *

### Why Port 6433?

In the Spirion SDP architecture, **Port 5433** is the direct port for the **PostgreSQL** database, but **Port 6433** is the port for **pgBouncer**.

-   **Search Agents MUST connect to 6433.**
-   Connecting directly to 5433 from remote agents can cause the database to run out of connections and crash the Discovery Agent.

**Summary:** If `Test-NetConnection` returns **False**, your distributed scan will continue to fail with the "Unable to find job queue" error until Port 6433 is opened.