Community
- Command Central
- MVP Program
- Monthly Mission
- Blogs
- Groups
- Events
- Media Vault
Products
- Observability
- Network Management
- Application Management
- IT Security
- IT Service Management
- System Management
- Database Management
Content Exchange
- SolarWinds Platform
- Server & Application Monitor
- Database Performance Analyzer
- Server Configuration Monitor
- Network Performance Monitor
- Network Configuration Manager
- SQL Sentry
- Web Help Desk
Free Tools & Trials

How do you secure your edge routers?

I am curious how others manage their border routers from Orion while keeping SNMP secure. I have to add new routers to Orion and Cirrus. These new routers sit on the border outside of the DMZ of one of our sites. So the internal facing interface is a publicly routed IP address. Currently my Orion boxes cannot access this IP from where it sits in the network without some static routes. I am concerned about creating some large security holes in my network. How are other people doing this?

Find more posts tagged with

Accepted answers

All comments

stephenspa

We have a separate instance of Orion running in our DMZ to get over this problem. Hoping that EoC brings it all together in one view.

uscallesen

I fail to see the issue - allow SNMP from your Orion Polling engine to the IP adresses of the routers you wish to monitor - and limit the routers to only respons to SNMP request from the Polling engine (or the IP you NAT to).

FormerMember

i agree this is too easy make a access list and make it so only the IP from your server can access SNMP.

we do this on all devices even the ones inside the network so that no one can stand up a different server and pull information or if you use read/write make changes on your devices.