Page 1 of 1
FIPS compatibility for Nagios/NCPA
Posted: Fri Feb 18, 2022 11:03 am
by hbouma
Our IT Security team is requiring FIPs mode for all RHEL 8 servers going forward. We are seeing that the NCPA agent has been having issues on some of these servers, and may be running into issues with our Nagios XI instance (
https://support.nagios.com/forum/viewto ... 16&t=64456).
My question is, does the Nagios XI 5.8.6+ version and NCAP 2.4.0 support FIPS mode? We are running into this issue with our NCPA system:
https://github.com/NagiosEnterprises/ncpa/issues/655
Re: FIPS compatibility for Nagios/NCPA
Posted: Mon Feb 21, 2022 2:38 pm
by ssax
Nagios XI and NCPA are not compatible with operating in FIPS mode at this time.
I haven't personally tried compiling NRPE on a FIPs mode system but since it's compiled it may work as an agent long as the protocols/ciphers are supported on the XI server.
Re: FIPS compatibility for Nagios/NCPA
Posted: Mon Feb 21, 2022 3:15 pm
by hbouma
Is there an ETA for when FIPS mode will be supported? It is a requirement by our IT Security team as well as a recommendation from Red Hat.
Re: FIPS compatibility for Nagios/NCPA
Posted: Tue Feb 22, 2022 12:46 pm
by ssax
I'm unable to give an ETA at this time but I talked with development the other day about NCPA/FIPS and they said they will take a closer look at supporting FIPS in NCPA 3.
I labbed it up with a FIPS enabled remote system and you can also monitor it through SSH as an alternative:
https://assets.nagios.com/downloads/nag ... ng_SSH.pdf