https://bugzilla.redhat.com/show_bug.cgi?id=1230761
--- Comment #4 from Kurt Seifried kseifried@redhat.com --- For Satellite 6 the install documents:
https://access.redhat.com/documentation/en-US/Red_Hat_Satellite/6.0/html-sin...
include firewalling elasticseach so that only the foreman, katello and root users can connect. As such this reduces exposure of elasticsearch significantly.