# Cannot access Kibana on Security Onion remotely

**URL:** <https://discuss.elastic.co/t/cannot-access-kibana-on-security-onion-remotely/227632>\
**Category:** Kibana\
**Created:** [April 11, 2020, 7:37pm UTC](https://discuss.elastic.co/t/cannot-access-kibana-on-security-onion-remotely/227632 "2020-04-11T19:37:03Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![englezakis](https://avatars.discourse-cdn.com/v4/letter/e/71c47a/32.png) [@englezakis](https://discuss.elastic.co/u/englezakis)\
**Post date:** [April 11, 2020, 7:37pm UTC](https://discuss.elastic.co/t/cannot-access-kibana-on-security-onion-remotely/227632/1 "2020-04-11T19:37:03Z")

</div>

Hi. I got a Security Onion installed on a VM. I have Kibana access locally. However, using another VM in the same LAN, I cannot access Kibana.  
I have used so-allow in Security Onion.  
Also, in kibana.yml I have set, server.host: "0.0.0.0"  
Running curl i get the following:

```auto
curl -v 10.1.4.124:5601
Expire in 0 ms for 6 (transfer 0x55611d8af5c0)
  Trying 10.1.4.124...
TCP_NODELAY set
Expire in 200 ms for 4 (transfer 0x55611d8af5c0)
connect to 10.1.4.124 port 5601 failed: Connection refused
Failed to connect to 10.1.4.124 port 5601: Connection refused
Closing connection 0
curl: (7) Failed to connect to 10.1.4.124 port 5601: Connection refused

```

Any suggestions are welcome.  
Thanks

---

<div class="post-metadata">

**Author:** ![rashmi](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/rashmi/32/16391_2.png) [@rashmi](https://discuss.elastic.co/u/rashmi)\
**Post date:** [April 13, 2020, 5:34am UTC](https://discuss.elastic.co/t/cannot-access-kibana-on-security-onion-remotely/227632/2 "2020-04-13T05:34:24Z")

</div>

Hi  
Is there a firewall on the server.This sounds like a network issue. If it's working from localhost (ie. the machine that is running Kibana), but not from external machines, are you sure the port is open on the machine running Kibana? And are you sure that the external machines are correctly resolving whatever hostname you are using?

Thanks  
Rashmi

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [May 11, 2020, 5:34am UTC](https://discuss.elastic.co/t/cannot-access-kibana-on-security-onion-remotely/227632/3 "2020-05-11T05:34:30Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.