Encrypt data between client and server nagios xi

[Naveed]

Hello,

I am using nagios xi and monitoring my windows and linux VMs.

Can anyone tells me that how to encrypt the data between client and nagios server.

Thank you for your help

[eloyd]

What type of communication are you using between the Nagios server and your Windows and Linux VMs? check_by_ssh would be the fastest way to see that everything was encrypted, but it's not as easy as just saying "oh, change over to check_by_ssh!"

[lmiltchev]

Thanks eloyd!

[Naveed]

Thank you eloyd for reply.

My requirements are as follows:

1-I have multiple clients those are being monitored through nagios xi (Window + linux)
2-I wants to secure the connection between nagios and hosts.
3-I looked for openssl implementation, but no luck so far.

need your help to implement openssl implementations

Share your thoughts please.

Thank you!

[eloyd]

I am still not clear what method you are using to query services on your Windows machines. Are you using NSclient? NRPE? NCPA?

[rkennedy]

What type of communication are you using between the Nagios server and your Windows and Linux VMs? check_by_ssh would be the fastest way to see that everything was encrypted, but it's not as easy as just saying "oh, change over to check_by_ssh!"

@eloyd is right - we need to know what agent(s) are you using on your client systems in order to point you in the right direction in regards to encrypting data. Each agent is going to be a bit different.

[Naveed]

I am using agents as

Nsclient ++ for windows

nrpe 2.15 for linux

[rkennedy]

NRPE should encrypt the data by default, unless you use the -n flag which represents not to use SSL.

As for NSClient++, this can be a bit tricky, are you looking at using check_nrpe or check_nt? Can you post your NSClient++ configuration file for us to look at?

[Naveed]

Thank you very much rkennedy!

I have attached my nsclient.ini file.

Kindly see and let me know your thoughts please.

[rkennedy]

Thank you very much rkennedy!

I have attached my nsclient.ini file.

Kindly see and let me know your thoughts please.

Can you also answer this?

As for NSClient++, this can be a bit tricky, are you looking at using check_nrpe or check_nt?