NagiosXI with Reverse Proxy

[BanditBBS]

We want to use NagiosMobile on our smart phones. However, for security issues they want to use a reverse proxy for browsing into XI(from outside our network). Internally, we'll still browse directly to it. Can anyone think of an issue with this?

[scottwilkerson]

This certainly doesn't sound like a bad idea, but I would need more detail on the planned execution before I could weigh in on possible problems/side effects...

Have they outlined how they want to set this up?

[BanditBBS]

Scott, I'll supply more information next week after I meet with the IT Security Group. So, look back then for the more detail.

[scottwilkerson]

Sounds great.

[BanditBBS]

Scott,

Finally had my meeting, looks like we are going to try it. I don't want to go into details on the forums, but basically will be doing a reverse proxy through our bluecoat appliance. Hopefully it works....I'll either know in the next week or two, or it has to wait until February.

[scottwilkerson]

Let us know how it works.

If all goes well, I would love to see a report, you can email it to [email protected] if you don't want to post publicly...

[BanditBBS]

Scott,

The reverse proxy was completed last Friday and is working great. We just go to the outside URL, that hits our proxy server and fwds us to the XI server. We are prompted by our proxy for user id and password, and that must pass over to NagiosMobile, as I get right to it. We are still in the initial rollout of NagiosXI here, so not many people are using it, but that shouldn't matter. We also have the proxy only allowing android or IOS browsers through. If our user's want to see full NagiosXI on a laptop, they can VPN in.

Jim/Bandit

[mguthrie]

Very cool! Nice work!