Page 1 of 1

Nagios License Check

Posted: Fri Nov 05, 2021 9:58 am
by durgaraoyv
Hi

Please let us know what security impact will be there if "Insecure logins" enabled ?
Is internet access a must to have the Nagios license check implemented ?

https://assets.nagios.com/downloads/nag ... -Check.pdf
Please let us know if any alternative to have this check?

Thank you.

Re: Nagios License Check

Posted: Fri Nov 05, 2021 2:09 pm
by benjaminsmith
Hi,

Unless it's an offline install, the server must have access to the internet to reach out license server (api.nagios.com).

Insecure logins are allowed by passing a user generate a ticket in the URL string for authentication. For this particular check, it's running the URL string against itself, but I would recommend setting up SSL/TLS on the system as well. That said, enabling insure logins is going to be less secure than not.

See:How To Configure SSL/TLS

Let us know if you have any other questions.

-Benjamin