title: OSSEC windows agent configuration
body: <p>I am getting started with OSSEC and i want to configure windows agent. I have followed the <a href="https://ossec-docs.readthedocs.io/en/latest/manual/agent/agent-management.html" rel="nofollow noreferrer">documentation</a> and <a href="https://www.digitalocean.com/community/tutorials/how-to-monitor-ossec-agents-using-an-ossec-server-on-ubuntu-14-04#step-6-%E2%80%94-import-the-key-from-server-to-agent" rel="nofollow noreferrer">this</a>. My server is a VM ubuntu and I want to have an Windows Agent.</p>
  <p>This is the output of active agents.</p>
  <blockquote>
  <p>vm:/var/ossec/etc# /var/ossec/bin/list_agents -c
  ** No agent available.</p>
  <p>vm:~/ossec-hids-3.2.0# tcpdump -i ens3 src 192.168.8.69</p>
  <p>tcpdump: verbose output suppressed, use -v or -vv for full protocol decode</p>
  <p>listening on ens3, link-type EN10MB (Ethernet), capture size 262144 bytes</p>
  <p>13:44:30.979244 IP 192.168.8.69.55341 &gt; 10.0.0.4.ssh: Flags [.], ack &gt;1445060350, win 16319, length 0</p>
  </blockquote>
  <p>This is list of already added agents.</p>
  <blockquote>
  <p>Available agents:    ID: 003, Name: WindowsAgent, IP: 192.168.8.69</p>
  </blockquote>
  <p>And here is my windows agent manager.</p>
  <p><a href="https://i.stack.imgur.com/VMTkL.png" rel="nofollow noreferrer"><img src="https://i.stack.imgur.com/VMTkL.png" alt="enter image description here" /></a></p>
  <p>On the server side I have droped the firewall.</p>
  <p>Maybe should I drop the firewall also on the client side? Also I am not so sure about server side IP address - but thats the output form ifconfig.</p>