jbrown8380

Comments

  • Yeah, I think this might be the way to go..maybe. So I went ahead and modified each of those config files (found a script to do it) and changed the enforceFIPSPolicy element to true and then rebooted. When it came back up I tried to access SolarWinds again and it couldn't talk to the database anymore. So I'm thinking that…
  • I've found the problem. After installing SolarWinds NPM v2020.2, I am required to harden the installation and bring it into compliance with DISA STIG requirements. I had gone into the IIS Configuration Editor and accessed the system.web/httpCookies section. From within this section I set the httpOnlyCookies property to…
  • Thanks for your reply. It looks like I need set those properties as defined in that link and also set the HttpOnly property. It's nice that it actually provides steps on how to do it. I think that's more of what I needed anyway. I didn't even know where to look.
  • If I run the following command in PowerShell then I see what looks like maybe 60 files that are all SolarWinds/Orion config files with the 'enforceFIPSPolicy' element set to 'false'. Get-ChildItem –path c:\ –include*.config -Recurse | Select-String –pattern enforceFIPPolicy I don't believe installing a new version of .NET…
  • Attempting to revive this thread. I know that it's an old thread but we've been able to get by for the last year or so without working this. But I'm receiving pressure again to get it fixed. So if I'm understanding your response correctly this means that SolarWinds NPM itself does not change these values. However; in the…
  • Would like to bump this post. Also, I'd like to simplify the question. Following the same support document that I linked to above I'd like to now simply install SolarWinds NPM in silent mode using the express install with SQL Server Express. This should be easy, right? Apparently not. The document indicates to use the…
  • As far as I can tell, the following are all the changes I made in IIS: Removed MIME types: .exe, .dll, .com, .bat, .csh Added the following additional W3C custom fields to the logging system: Request Header >> Connection Request Header >> Warning Request Header >> Authorization Response Header >> Content-Type Configured…