Hi,
I need to know what the nagiosxi update server ip address and port are to allow updates from a data centre securely
Regards, Dave
Update for nagiosxi behind a firewall
Re: Update for nagiosxi behind a firewall
I don't have that on hand, but I'll ask about it.
Please note that we can only speak toured our update-check server and not the yum repository mirrors that you would need access to during updates and to apply security patches.
Our update server is running in a cloud so it's address can/may change without warning and/or our control.
Out of curiosity do your logs indicate traffic that's being rejected? I find it interesting the different approaches to network security. I've always used a fix-on-fail approach, I'd review the reject logs daily and then seek the documentation explaining the activity. Many others seam to open/allow anything and every thing that's documented as in use, weather it's actually in use or not. A once qourterly assesment of the rules being used and there impact used for the removal or dead/unused rules is not something I've ever implemented.
Please note that we can only speak toured our update-check server and not the yum repository mirrors that you would need access to during updates and to apply security patches.
Our update server is running in a cloud so it's address can/may change without warning and/or our control.
Out of curiosity do your logs indicate traffic that's being rejected? I find it interesting the different approaches to network security. I've always used a fix-on-fail approach, I'd review the reject logs daily and then seek the documentation explaining the activity. Many others seam to open/allow anything and every thing that's documented as in use, weather it's actually in use or not. A once qourterly assesment of the rules being used and there impact used for the removal or dead/unused rules is not something I've ever implemented.
-
tonyyarusso
- Posts: 1128
- Joined: Wed Mar 03, 2010 12:38 pm
- Location: St. Paul, MN, USA
- Contact:
Re: Update for nagiosxi behind a firewall
I believe this one is currently 173.45.234.224