Page 3 of 3
Re: Need support to monitor firewall devices
Posted: Mon May 20, 2019 12:40 pm
by rtsupport
we have test this command --
and not getting output, how we satisfy network team showing any result which says issue from network end only or any log which we can refer to check and let then know as no issue from Nagios end.
Re: Need support to monitor firewall devices
Posted: Mon May 20, 2019 3:42 pm
by rtsupport
Hi Team,
Now we are able to get snmp output from command given by you, but getting attached error while setting up in Nagios UI. Please help us to fix this.
Re: Need support to monitor firewall devices
Posted: Mon May 20, 2019 4:10 pm
by scottwilkerson
Are you running these on the same server (e.g. testing on the worker and XI)?
Re: Need support to monitor firewall devices
Posted: Tue May 21, 2019 11:41 am
by rtsupport
one more question --
we are able to get the details using snmp, device is added using wizard - Linux Snmp
services associted with that devices we are getting an output, but on device and Ping its showing down as ping is disabled from firewall.
so is Ping rely require to enable or is there any other way we can do that.
Have attached screen shot for same.
Re: Need support to monitor firewall devices
Posted: Tue May 21, 2019 2:29 pm
by scottwilkerson
rtsupport wrote:
so is Ping rely require to enable or is there any other way we can do that.
No it was a checkbox that you left checked, you can uncheck it (or remove this one from the Configure -> CCM
One thing to note, by default the host is going to also try to check via ICMP, you will have to change the host check to check something else, or it will be marked as down
Re: Need support to monitor firewall devices
Posted: Tue May 21, 2019 3:40 pm
by rtsupport
Hi Team,
Please suggest what we need to change (you will have to change the host check to check something else) to make sure host shows as UP.
Re: Need support to monitor firewall devices
Posted: Tue May 21, 2019 4:57 pm
by tgriep
Here are some instructions for managing host checks in XI.
https://support.nagios.com/kb/article/n ... t-286.html
And instructions for managing services.
https://support.nagios.com/kb/article/n ... t-539.html
If the device does not allow ICMP, you can remove the PING service for the host as it is disabled.
For the host check change, you have a few options.
If the device has a web interface enabled to access it, you can edit the host check and change the command to check_xi_host_httpd and remove all of the arguments.
That will change the command to the check_http plugin and check that the device can be access by the web interface.
Or, it the device has SSH access, you can change the command to check_ssh and clear out the arguments.
That will check the server can be accessed by ssh.
Try those out and if you have ant further questions, let us know.