Nagios Support Forum

Hi

Please let us know what security impact will be there if "Insecure logins" enabled ?
Is internet access a must to have the Nagios license check implemented ?

https://assets.nagios.com/downloads/nag ... -Check.pdf
Please let us know if any alternative to have this check?

Thank you.

Hi,

Unless it's an offline install, the server must have access to the internet to reach out license server (api.nagios.com).

Insecure logins are allowed by passing a user generate a ticket in the URL string for authentication. For this particular check, it's running the URL string against itself, but I would recommend setting up SSL/TLS on the system as well. That said, enabling insure logins is going to be less secure than not.

See:How To Configure SSL/TLS

Let us know if you have any other questions.

-Benjamin