fcaron

On the RDP, the input we have from users asking to remove RDP and promote Web, is that you can make far more damage by granting access to the box (vs HTTP only). Sure there are counter examples, but in general, unless you spend a lot of time locking everything in teh Windows env't, this is likely a true statement, I think.…

This is in beta now, you can get it by signing up. Quick and easy. Instructions here: http://thwack.solarwinds.com/message/170645#170645

It will be in the next beta version, this month. RC will be some time next quarter.

Sorry to hear that. Here are the recordings: http://solarwindsthwackcamp.com/#/webcast You'll need Flash installed to watch them.

Specifically for you, byrona, as an MSP, would you use this "Administrator limited to a group" to delegate full admin right to each of your customers? I suppose the answer is yes, but would like to be sure.

Are they in "unmanage" state in Orion? Other than that, I don't see any reason for this to be. You might have to open a case about this.

Very clear, thanks. BTW, limiting access per group does not work (see this section in my post above: "Single Group: this one is tricky, because it does not do what most people expect..." The way to make it work is use a custom property (as described in the blog too), which I think is what you do. So you are good there.

And it won't be for 4.0, we could not contain it. Will remove from the description above. This is stil fairly high on the list for vNext (246275)

As they mention, once the packets coming from different overlapping customers, reach the Orion Polling Engine, then the rest is fine, because nodes are not keyed based on their IP. So the whole issue is how to route SNMP packets between Polling Engine installed on the same site (e.g. NOC) to customers that have Overlapping…

We are ALSO working on these issues. What we see on Juniper and flow, in general is this: * JFlow is technically same as NetFlow, so the work done to support sampled NetFlow applies also to JFlow. But Juniper devices don’t follow the specification fully and some models don't export the sampling rate, so what we have…

The enhancement request was opened, but did not make the list of delivered enhancements.

You should be able to leverage what we have now, even if you are not an MSP. We tagged this blog MSP because this type requirement usually comes from this segment of the market, but nothing prevents you from using these features to "isolate" your users (e.g. per dept or even individual users) and limit their visibility,…

I'll ping you off line, Jessica.

Yes 7.0.2 will require a new version of Core, which is part of NPM 10.2.2. Note that this is true in this particular instance but is not a universal rule. You will see cases where NCM upgrade: - will not require any new version of Core - will require a new version of Core (which will come with NCM) but won't require to…

More on Gigamon feeding packets to Orion here. @jbiggley how useful would it be to have an equivalent of wireshark, for analysis of the details of the packets, integrated to NPM, in the future?

Yes this is what this means. if you have APE's (Additional Polling Engines) on your NPM and have NCM integrated (same or separate servers), you can choose to have NCM leverage your APE's, or choose not to (in this case NCM is still integrated but continues to perform its NCM tasks from the main NCM server). There is no…

Is there a programmatic way to create Orion Events and Alerts? You can for Events but not Alerts. Here is how you would create Alerts: New-SwisObject (connect-swis -h latest-builds -u admin) Orion.Events @{EventTime=[DateTime]::UtcNow;EventType=1000;Message="Testing API";Acknowledged=$false} The "EventType" field…

This matrix is now updated in this Knowledge Base - article

That helps. Thanks (261258)

Personnaly, I consider it a security concern, but if you are aware of it, and are making sure that you are not putting any customer confidential info in your maps (e.g. stick to cities, coutries, avoid buildings, don't put IP addresses hardcoded in the maps, that type of things), I think this is an acceptable concern, for…

Can you give an example of "getting exact block matches including ordering for ACLs in compliance"?

OK, got it, you need a user with same privileges as an Administrator, but limited in scope to his/her "domain" (e.g. group of nodes, views, group of users). We have opened a request against this (156610)

We just introduced a new product which covers this: FSM, Firewall Security Manager, more here

What would be your dream tools in Toolset, if we were to add some new ones?

The NTA 4.0 situation should be similar to v3.11, as far as sampled flow processing: - sflow should work (sflow is by nature sampled) - sampled jflow should work, but we know that we have some issues with some devices (e.g. JunOS versions) that export flows without specifying that it is being sampled (so NTA processes…

Hi bpeyton17, Assuming you have been talking to support and they have recommended you to break it up, there might be something special going on, that made them say this, because with 3+1 pollers, you should be fine with 30,000 elements, under normal circumstances. Do you have a support case # that we could look at? More on…

Thanks a lot for thorough answer. Yes, one of the key benefit of DPI is that it's inherently vendor agnostic. See more above, about the Juniper comment of Mustafa and sja.

Yes, this new edition of the blog post above (covering NCM 7.1) covers this.

No it does not. Assuming you are still in NCM 6.x, on a separate server from NPM, and integrated with NPM. With NCM 7.0, you can still run this configurtion, but you can't leverage your NPM additional poller in NCM With NCM 7.1, you can still run this configurtion, by upgrading your NCM 7.0, and you can now leverage your…

Have you tried NTA 4.0 yet?