ecklerwr1 · Sr. Network / Systems Architect · ✭✭✭✭✭

I have a related question... I'm working on a new implementation in a MLS network. From what I was told applying the STIG to the NPM server broke just about everything... can you peeps give me some insight into how you've handled this? I mean we all want a functioning Orion and to make our network as audit ready as…

I'm in the same boat with one of my networks completely air gapped PL2... I wonder what's adding all that text to the xml files??? Perhaps we need a forum for all thinks SW related to dealing with air gapped networks, STIG's, nispom compliance and stuff like that? It seems like enough of us and even multiple mvp's are all…

Although if you think about it they have already consented to monitoring when they log into the domain in the first place... so consent is inferred with pass through auth...

The only work around I could think of is to have them link to an intermediate page that then has and accept button on it which links to the real Orion.

I'm glad I'm not the only the one that couldn't figure out how to export my web reports...

How many routes are in the table on this little 2901? Is this guy trying to hold a huge route table? If it's huge this might explain part of the problem especially if there's also version of IOS like jeffnorton referred to.

Haven't tried it but there's something in the resource exchange for this: Otherwise you have to edit the registry etc. another method here also:

Quick Q&A clarification on enhancements: Syslog and Traps – Ability to change the status of an interface in Orion NPM based on Trap message Does this mean changing the status of interface to down (red) when a trap down message is received (before polling figures it out) or is it the ability to do something like... if I…

From my experience shared memory is always 100% Also if you use the linux agent it provides more accurate stats I believe for linux.

We have used NPM for a long time... until recently we had always used kiwi tools to download and do diffs of our Cisco device configs. We previously also used another tool for compliance. By switching from kiwi to NCM we replaced two other older tools and also gained the integration inside Orion between modules. Since most…

The top five is the top 5.... there are probably many more than 5 conversations that make up your 100%. You can change the resource to list more than top 5 and you'll see more... you can even list them all. When listing all the conversations they should add up to 100%.

You might want to add this to the NPM feature request forum here: http://thwack.com/forums/57.aspx

You can go into Manage Nodes from the main All nodes list. Open up the device in question and put a check next to the interface you are having a problem with. Select Edit Properties button. This will bring up the following dialog where you can enter a custom send and receive bandwidth: This should help you resolve your…

I've always been a little confused by this...

I've run into this now as well! I thought I was losing my mind at first!!!

I was thinking it might have something to do with the clocks on the nodes not being in sync or in different time zone as well.

I'm guessing SAM would the place to start looking. Look at some existing monitors/templates... or Transactions under AppInsightSQL in SAM maybe?

Also let be real... text files like this don't take up much space in the grand scheme of things... even if you have 10,000 devices. I'm sure they compress great too... so like Craig said why not just gzip2 the whole lot of them and keep somewhere safe???

In doing a little more research I'm starting to think this has something to do with the new Server Asset Inventory Collection maybe??? I'm starting to think this is SAM doing this not NPM... I bet aLTeReGo knows what this is???aLTeReGo any ideas?

The easiest way to deal with access to the Orion NPM applications on the server is to just rdp to Orion server from your client PC and run the apps that way. My NPM server is in a DMZ on an isolated network so to access it I rdp in from the normal intranet. This requires firewall rules for rdp into the DMZ. It's also a…

Why has this never been fixed? I thought this has been going for years now?

Using OPSnet for DPI... we decided to put the capture on the server VLAN sampling all of the traffic going to and from main application server farm to capture the most important client/server conversations.

I just uploaded two reports for last month and this month top 10 interface utilization peak and average... you could modify to make them one week instead and increase or decrease how many interfaces it would show: Nothing fancy but I think it answers your question. It was easier to upload to content exchange then do all…

And... Here's Ginger as a puppy... my first Corgi. Here's Brittany as a pup with Ginger once she was full grown:

This is Jaeger and Marika

It would be nice if more was shown about ASA's right out of the box in NPM... also with firepower in all the new ASA's it's really growing in usage and function!

Yeah deleting the node would mean losing all the nodes historical data.

See this thread for an answer on what rediscovery does... the name is a little misleading... it has more to do with reindexed interface IDs and such:

It would be impossible for NPM to scale if you were trying to poll that often. For something like that you'd almost need a realtime DPI packet capture like tool. Also depending on the speed of your interfaces this might even require special hardware. This would also be quite a bit much more expensive of an option.…

I've been getting what I need from NPM (monitor switches/routers/a few servers) with NTA (netflow) plugin and for realtime stuff Engineer Toolkit.