Community
- Command Central
- MVP Program
- Monthly Mission
- Blogs
- Groups
- Events
- Media Vault
Products
- Observability
- Network Management
- Application Management
- IT Security
- IT Service Management
- System Management
- Database Management
Content Exchange
- SolarWinds Platform
- Server & Application Monitor
- Database Performance Analyzer
- Server Configuration Monitor
- Network Performance Monitor
- Network Configuration Manager
- SQL Sentry
- Web Help Desk
Free Tools & Trials
Store

Managing with snmp only, a Firewall is blocking ICMP packets

I have a
router at a remote location that we are trying to monitor.

I can add the IP address and correct SNMP string to Orion and select the
elements that I want to monitor. I can even actually capture statistics from
the device, yet Orion says the device is down: The router is behind a firewall
that blocks any ICMP packet , our security policies are strict and don’t
permit any changes. I am asking if there is a way to work only with SNMP ( we
had in the past NetView which accomplished the task perfectly).

Great Thanks.

Find more posts tagged with

SNMP

icmp

Accepted answers

All comments

mark_wiggans

Unfortunately ICMP can not be turned off without monitoring the node. This is the way Orion has been coded to tell whether or not a node is down.

FormerMember

If the device is an SNMP-enabled device, you should htink that a simply query of the ifOper Status and the ifAdmin Status are set then it shouldb e able to determine if the device is up or down. SNMP polling this variable in the ifMib would be another way to tell if the device (and all its interfaces) were active or not. It would actually be a more accurate way to tell. I have the same issue that ICMP is blocked on a router because it is in an unsecure zone, but we want to collect the statistics on the interfaces. We can collect the stats, but the device will never have accurate availability time because it will always read as down.

jbaulsir

Can you put in a rule in to your firewall to allow the ICMP ping from just the Orion server? I understand the limitations but ICMP is the best way to determine if a device is up or down. SNMP can go down on the monitored device and it will look as if it is down. I'd rather not get woken up in the middle of the night for a false alarm, but that's just me

scoundrel27

Hi there,

We're using APM version 1, and we're having problems using this kind of set-up (third party monitoring services such as RPM,tomcat, SMTP, POP with only SNMP to monitor the services behind their firewall). What can you advise us to do, we tried using the .exe file (i.e. TOMCAT - tomcat.exe), APM querried it as dwon but the client's server operation is up.

Do we need to ask them to also open the ICMP at their firewall?

ed.

FormerMember

We're using APM version 1, and we're having problems using this kind of set-up (third party monitoring services such as RPM,tomcat, SMTP, POP with only SNMP to monitor the services behind their firewall). What can you advise us to do, we tried using the .exe file (i.e. TOMCAT - tomcat.exe), APM querried it as dwon but the client's server operation is up.
Do we need to ask them to also open the ICMP at their firewall?

ICMP is not relevant to your problem. I'm not sure what you mean by saying "we tried using the .exe file"...

scoundrel27

ICMP is not relevant to your problem. I'm not sure what you mean by saying "we tried using the .exe file"...

This is the settings that we used

tomcat.JPG