Using an additional web server as read-only (view status) access to NPM

We have our Orion system in a secure Payment Card Industry (PCI) environment. As such, we have limited the number of individuals having access to this environment, and of having any ability to affect the configuration of devices and/or Orion.

With that in mind, my question is as follows: Is it possible to put an additional web console outside a secured environment, and then lock it down to be a READ ONLY environment for displaying the status of nodes. (up/down/unmanaged). How have others addressed this need?

Thanks,

Craig

Find more posts tagged with

npm - network performance monitor

security planning

additional web console

Accepted answers

All comments

cjfranca

How nodes you have in your enviroment ?

If more than 13k I think you need a add poller and EOC for ecalability. If not you is better you to do make a implamentation additional web server.

dgsmith80

Hi Craig,

You could install an AWS (Additional Web Server) outside of your DMZ environment and allow users to log on from that location, however, the permissions of what they can and can't do will still be set within the user accounts. You would need to create a custom view with the node views that you wanted these users to have, and then just set up a simple account with read-only permissions and have it set to that restricted view.

Of course, don't forget that the AWS itself will need to have access through the Firewall to get access to the Orion environment itself as that is where it is pulling the information.

Hope that helps.

David

cfriell

Thank you David.. this confirms my thoughts as well. I think it will work this way, we just would have to get signoff from our security folks. Thanks again!

dgsmith80

No problem, here is a link to the additional ports that they will need to allow through the Firewall.

Port requirements for all SolarWinds products - SolarWinds Worldwide, LLC. Help and Support

ANAND_Raj

Hi Craig,

I have a similar requirement now in our project but understand that Web server itself cannot be made Ready only rather accounts. That doesn't help me. Did you get any solution around this?

Regards