haroldrelm

I like the post, but we operate on the assumption that there is no such things as a "trusted zone". We treat our internal network just as we would the hostile Internet. Traffic between internal machines and between various VLANs all need to be explicitly permitted. A pain in the butt to setup and fine tune, but once it is…

For sure!! We just switched out the ASAs for PAs as well. Cant believe we didnt sooner!

Do you have any thoughts on their commercial product, Nagios XI?

Do you have a similar comparison to Nagios XI, their commercial version? My manager wants us to do a bake off against Nagios XI and any ammo would help. thanks

Also, if you dont already have an incident response plan, using an inventory list of your PCI devices from orion can help getting started. Those re in requirement 12 I believe.

Agreed, sounds like a simple CRM solution could solve these issues.

That is one of the reasons we have transitioned some of our stuff to Nagios XI. Their support has been extremely responsive and effective. Im sick of "support" that is responsive, but doesnt know anything other than "can you reboot?".

We had a similar problem and just stood up an instance of Nagios for the few systems we couldn't monitor with Orion. It is a pain having two systems doing the monitoring, but it works.