Prerequisites for Mule ESB Monitoring Agent
Unlock the full potential of your Mule ESB and MuleSoft Anypoint Platform with the Nodinite Mule ESB Monitoring Agent. This page outlines everything you need to get started—ensuring a smooth, secure, and efficient monitoring experience for your integration landscape.
Architecture overview: The Nodinite Monitoring Agent supports both on-premise and cloud/hybrid MuleSoft environments for maximum flexibility.
You can deploy the agent on-premise using TCP/IP for local network access, or in the cloud/off-site using Service Bus Relaying ('Azure Relay FAQs').
We recommend installing the agent close to the Nodinite Core Services. This guide focuses on local network setups, typically on the Nodinite application server.
Mule ESB Application (ZIP)
For Mule ESB version 3.x, use this option for on-premise environments. Mule version 4.x leverages public CloudHub APIs.
The Nodinite Mule ESB Monitoring Agent communicates with a Nodinite-specific Mule ESB Application that you install on each Mule Server Instance you wish to monitor. This application provides direct access to the Mule ESB run-time, ensuring comprehensive monitoring and insight.
Software Requirements
This section applies to the Nodinite application server (usually), you will install the Nodinite Mule ESB Monitoring Agent as a Windows Service.
| Product | Version/Edition |
|---|---|
| Windows Server | Windows 2025Windows 2022Windows 2019Windows 2016Windows 2012 R2Windows 2012 |
| .NET Framework | .NET Framework 4.8 or later New 6.0 |
| Mule ESB | 3.7 and later |
| MuleSoft ESB | Mule runtime engine 4.0 and later |
| MuleSoft ESB | Anypoint platform, on-premise and/or hosted in Cloudhub |
Versions 6.0 and later make use of the .NET Framework 4.8 or later.
Version 5.4 make use of the .NET Framework 4.6.2 or later.
Versions before 5.4 make use of the .NET Framework 4.5.2 or later.
What Windows User Rights does the Nodinite Mule ESB Monitoring agent require?
The agent is installed as a Windows Service usually on the Nodinite application server. Virtual machines are supported.
- Local named account or domain account (preferred).
- Access and run-time rights
- Follow the 'How to set logon as a Windows service right' user guide for detailed instructions.
What Cloudhub user rights does the Nodinite Mule ESB Monitoring agent require?
This section is applicable for version 4.x.
The Nodinite Mule ESB Monitoring Agent requires the Cloudhub Admin right. Apply this setting to each environment.

To enable monitoring of the Anypoint instance, apply the Cloudhub Admin right to each environment.
What Mule ESB User rights does the Nodinite Mule ESB Monitoring agent require?
This section is applicable for version 3.x.
The Nodinite Mule Monitoring Application (Zip file) needs to be installed into the Mule ESB server instance (repeat for each node to be monitored)
What Firewall settings does the Nodinite Mule ESB Monitoring agent require?
The Mule ESB Monitoring Agent has both inbound and outbound TCP-based communication:
- Between the Monitoring Service and the Mule ESB Monitoring Agent
- For version 3.x, between the Mule ESB Monitoring Agent and instances with the Nodinite Mule ESB Monitoring Application (install ZIP file)
The agent can be installed On-Premise using TCP/IP and/or in the Cloud using Service Bus Relaying (see also the external link for additional information 'Azure Relay FAQs').
1. Between the Monitoring Service and the Mule ESB Monitoring Agent
The following ports must be allowed on the Windows server where the agent is installed and running :
| Port | Name | Inbound | Outbound | TCP | UDP | Nodinite Version | Comment |
|---|---|---|---|---|---|---|---|
| 53 | DNS | All | The Agent needs to know where your other servers/services are (can sometimes optionally be solved using entries in the local hosts´ file) | ||||
| 443 | TCP | - | - | All | eu1.anypoint.mulesoft.com | ||
| 443 | TCP | - | - | All | anypoint.mulesoft.com |
Option 1a (Nodinite v7 - IIS hosted on local network)
| Port | Name | Inbound | Outbound | TCP | UDP | Nodinite Version | Comment |
|---|---|---|---|---|---|---|---|
| Custom | HTTP/HTTPS | v7 | Agent IIS site port (configured during installation in the Portal). Only required if agent is on a remote IIS server |
Note
Nodinite v7 IIS Hosting: When agents are hosted in IIS on the same server as the Nodinite application (typical installation), firewall rules are not required between the Monitoring Service and the agent. The custom port is assigned during installation via the Nodinite Portal and only needs to be opened if the agent is hosted on a remote IIS Windows Server.
Option 1b (Nodinite v6 and earlier - Windows Service on local network)
| Port | Name | Inbound | Outbound | TCP | UDP | Nodinite Version | Comment |
|---|---|---|---|---|---|---|---|
| 8000 | RPC | v6 and earlier | Communication is initiated by the Monitoring Service. Only used with legacy MSI installer on remote Windows servers |
Note
Nodinite v6 Legacy: Port 8000 is only used when agents have default installations on remote Windows servers using the legacy MSI installer. This port is not required for Nodinite v7 IIS-hosted agents.
Option 2 (Cloud/Hybrid - All versions)
Use Service Bus Relayed connections when Nodinite and the agent are on totally different networks.
Nodinite uses the same principle technique as the On-Premise data gateway, see 'Adjust communication settings for the on-premises data gateway' user guide.
| Port | Name | Inbound | Outbound | TCP | UDP | Nodinite Version | Comment |
|---|---|---|---|---|---|---|---|
| 443 | HTTPS | All | Secure outbound traffic | ||||
| 5671, 5672 | Secure AMQP | All | |||||
| 9350 - 9354 | Net.TCP | All |
2. Between the Mule ESB Monitoring Agent and Mule ESB Instances (v3.x)
Server types: Agent Server (Mule ESB Monitoring Agent), Mule Server (on-premise Mule ESB v3.x runtime with Nodinite Mule ESB Monitoring Application installed).
This section is applicable for Mule ESB version 3.x only.
Mule Monitoring Application Connection (Agent → Mule ESB v3.x)
The agent connects to on-premise Mule ESB v3.x instances with the Nodinite Mule ESB Monitoring Application (installed via ZIP file) to collect monitoring data.
| Direction | Source | Destination | Protocol | Port(s) | Purpose | Notes |
|---|---|---|---|---|---|---|
| Outbound | Agent Server | Mule Server (v3.x) | TCP | 8084 | Mule Monitoring Application | Default port for monitoring data collection |
| Inbound | Mule Server (v3.x) | Agent Server | TCP | 8084 | Response traffic | Allowed automatically by stateful firewalls |
Tip
Custom Port Configuration: The default port 8084 can be customized during installation of the Nodinite Mule ESB Monitoring Application. Only make changes to this value after consulting Nodinite support.
Tip
Multiple Mule Instances: If monitoring multiple Mule ESB v3.x instances, ensure the Agent Server has outbound connectivity to all configured Mule servers on port 8084 (or custom ports).
3. Between the Mule ESB Monitoring Agent and Cloudhub Platform (v4.x)
Server types: Agent Server (Mule ESB Monitoring Agent), Cloudhub Cloud (MuleSoft Anypoint Cloudhub platform).
This section is applicable for Mule ESB version 4.x and Cloudhub-hosted applications.
Cloudhub API Connection (Agent → Cloudhub Platform)
The agent connects to the MuleSoft Anypoint Cloudhub platform to monitor cloud-hosted Mule ESB v4.x applications.
| Direction | Source | Destination | Protocol | Port(s) | Purpose | Notes |
|---|---|---|---|---|---|---|
| Outbound | Agent Server | Cloudhub Cloud (anypoint.mulesoft.com) | TCP | 443 (HTTPS) | Cloudhub platform API | Monitor cloud-hosted Mule applications |
| Outbound | Agent Server | Cloudhub Cloud (eu1.anypoint.mulesoft.com) | TCP | 443 (HTTPS) | Cloudhub EU region | For EU-hosted applications |
| Inbound | Cloudhub Cloud | Agent Server | TCP | 443 (HTTPS) | Response traffic | Allowed automatically by stateful firewalls |
Tip
Cloudhub Authentication: The agent requires Cloudhub Admin rights for each environment to be monitored. Apply this setting in the Anypoint platform for each environment. See Mule ESB Monitoring Agent for configuration details.
Tip
Regional Endpoints: Ensure the Agent Server can reach the appropriate Cloudhub regional endpoints:
- anypoint.mulesoft.com (US region - default)
- eu1.anypoint.mulesoft.com (EU region)
Configure firewall rules based on your Cloudhub deployment region.
Note
No Inbound Rules on Cloudhub: MuleSoft Cloudhub is a cloud service accessed outbound from the Agent Server. No inbound firewall rules are required on the Cloudhub side.
Note
DNS Resolution: All servers (Agent Server and Mule Servers) require outbound access to DNS on TCP/UDP port 53 for name resolution. This is already listed in section 1 and applies universally. You can optionally solve this using entries in the local
hostsfile on each server.
Important
Stateful Firewalls: Most modern Windows Firewall implementations are stateful, meaning inbound response traffic for established outbound connections is automatically allowed. The inbound rules listed above are primarily for reference and troubleshooting scenarios where stateful inspection may be disabled or restricted.
Next Step
Related Topics
Add or manage a Monitoring Agent Configuration
Monitoring
Administration