Nagios Support Forum

Hello Team,

i got the Task to set up a Monitoring Agent with high security. Using NSClient++ on a Windows Machine there are some issues with setup and configuration to make a properly ssl encrypted communication between the XI and the Agent work.
Maybe there is a Way in the Future to append a Wizard to Nagiosxi which can do the Configuration by using the Web GUI.
Including the generating of a working nsclient.ini or exchanging certificates testing secure ssl connection to the Agent or whatever to make it easy for ssl noobs to setup.

Going on it might be interesting like in check_mk to connect to the NagiosXI Webgui from the Client and download+Install+setup the Agent directly from the XI Machine.

You would certainly do me a great favour with that...

i got the Task to set up a Monitoring Agent with high security. Using NSClient++ on a Windows Machine there are some issues with setup and configuration to make a properly ssl encrypted communication between the XI and the Agent work.
Maybe there is a Way in the Future to append a Wizard to Nagiosxi which can do the Configuration by using the Web GUI.

What parts would you looking to have it configure? The XI system won't be able to access the Windows file system which becomes a bit of a limitation.

Including the generating of a working nsclient.ini or exchanging certificates testing secure ssl connection to the Agent or whatever to make it easy for ssl noobs to setup.

I filed a feature request for this, #10751.

Going on it might be interesting like in check_mk to connect to the NagiosXI Webgui from the Client and download+Install+setup the Agent directly from the XI Machine.

What advantages do you see coming to XI with check_mk? As it isn't our product we're a bit limited for what we can help with on support, but I'm interested to learn what the benefits are here.

rkennedy wrote:

i got the Task to set up a Monitoring Agent with high security. Using NSClient++ on a Windows Machine there are some issues with setup and configuration to make a properly ssl encrypted communication between the XI and the Agent work.
Maybe there is a Way in the Future to append a Wizard to Nagiosxi which can do the Configuration by using the Web GUI.

What parts would you looking to have it configure? The XI system won't be able to access the Windows file system which becomes a bit of a limitation.

XI could maybe generate a nsclient.ini specialised for the target Client which could in turn be downloaded from the web GUI and manually placed in the NSClient++ Folder by the User.
Therefore i might think of a Dialog box in which the User could define which Features to setup and how... in my Case for ssl encryptet communication between XI and the NSClient Agent.
It could also provide a download for the necessary Files like certificates or what ever is necessary to complete the targeted Configuration including a dokumentation where to put which File and what to do step by step to make it run.

Including the generating of a working nsclient.ini or exchanging certificates testing secure ssl connection to the Agent or whatever to make it easy for ssl noobs to setup.

I filed a feature request for this, #10751.

Thank you, please keep me informed if possible.

Going on it might be interesting like in check_mk to connect to the NagiosXI Webgui from the Client and download+Install+setup the Agent directly from the XI Machine.

What advantages do you see coming to XI with check_mk? As it isn't our product we're a bit limited for what we can help with on support, but I'm interested to learn what the benefits are here.

I dont use check_mk! Its just that i've tested various Solutions in Order to decide which Monitoring system to use.
However in check_mk there is a Kind of library embedded in the Web GUI where you can download the fitting agent install-packages (*.msi in this windows-case) from the Monitoring Server.
For me this would be interesting for rolling out Agents.
Combined with a future-Wizard for setting up and download the Configuration and Files it could make agent-rollouts quite easy

This idea driven on: a function in XI to verify that a Agent connection is properly ssl encrypted to verify the encryption for the company-security departments (maybe with a generated security-Report of all Connections and XI Features) would be great.

I believe the first response aligns up with having the configuration file generated, similar to the FR I filed already.

Thank you, please keep me informed if possible.

I will leave this thread open for you - it isn't possible to check anywhere, but if you post back in time we'll be able to look it up internally.

This idea driven on: a function in XI to verify that a Agent connection is properly ssl encrypted to verify the encryption for the company-security departments (maybe with a generated security-Report of all Connections and XI Features) would be great.

I filed a feature request for this, to have wizards to more pre-req verifications. The ID is #10763.