This discussion has been locked. The information referenced herein may be inaccurate due to age, software updates, or external references.

You can no longer post new replies to this discussion. If you have a similar question you can start a new discussion in this forum.

Polling Engines

wayne.goulden over 15 years ago

Hi,

I have several different LAN's with Firewall protection between them due to the different security classifications. I want to monitor all LAN's with ORION but don't want SNMP information crossing Firewall boundaries. I am therefore looking at using polling engines within each of the LANs and send the information back through the Firewalls to the main ORION.

Can someone advise what the capabilities are of the polling engine and what connectivity it uses to communicate with the main ORION, i.e. TCP port 1234 etc... Any links to detailed information on the polling engine will be appreciated or an idea how this set up can be achieved without sending SNMP through Firewall boundaries.

Thanks,

Wayne

0 FormerMember over 15 years ago

If you allow SNMP through the firewall, you'll need to open 161, but if you move polling engines to the other side of the firewall, you'll need to open the SQL port (1433, usually), and you'll also need to open up 17777, which is a port we need starting in Orion 9.0--although the latter is only necessary is you want to be able to manage nodes from the web console.
Cancel
Vote Up 0 Vote Down

Cancel
0 BryanBecker over 15 years ago in reply to FormerMember

Denny....that 17777 port...is that in both directions? Our web server sits in a DMZ so I need to know if the rule needs to be applied on the inbound from the poller to the web server or the outbound from the web server to the poller....or both.
What about when you get Cirrus invloved too? What port is needed between the Cirrus server and the poller and or Web server? Directions?

Thanks.
BB
Cancel
Vote Up 0 Vote Down

Cancel
0 chris.lapoint over 15 years ago in reply to BryanBecker

That would be port 17777 in both directions for managing nodes. This allows communication to the Information Service running on the Orion server (nothing to do with polling).

Cirrus would also require port 161 for SNMP (if you want to run inventory) and you'll want to allow ICMP traffic through your firewall if you care about status polling. Cirrus does not currently have any remote polling engine or remote inventory engine capabilities.
Cancel
Vote Up 0 Vote Down

Cancel
0 FormerMember over 15 years ago in reply to BryanBecker

Bryan,
It's inbound only. From EOC to the Orion SWIS. And from the web console to the database.

But the UnDP needs 17777 open bidirection from the UnDP to the main poller, if you want it to run on the additional poller.
Cancel
Vote Up 0 Vote Down

Cancel
0 Nicki over 15 years ago in reply to FormerMember

Hi,
For Orion v9.x, is there a bonafide document stating the inbound and outbound rules, and source and destination definitions, needed for port 17777. Is the Solarwinds server the source address, and the monitored server the destination address?
It seems there are a lot of persons asking questions regarding this...
thank you for your input.
Cancel
Vote Up 0 Vote Down

Cancel

0 BryanBecker over 15 years ago in reply to Nicki

Hi,
For Orion v9.x, is there a bonafide document stating the inbound and outbound rules, and source and destination definitions, needed for port 17777. Is the Solarwinds server the source address, and the monitored server the destination address?
It seems there are a lot of persons asking questions regarding this...
thank you for your input.

Nicki...IIRC you need 17777 bidirectionally between your pollers and the NPM server.

0 Nicki over 15 years ago in reply to BryanBecker

Bryan,
Thank you for your quick reply!
Nicki
Cancel
Vote Up 0 Vote Down

Cancel
0 mark_wiggans over 15 years ago in reply to Nicki

Port and Firewall Information

Orion
communicates with Orion NPM servers through the SolarWinds Orion
Information Service protocol over TCP port 17777. Firewalls between
Orion and Orion NPM servers must have TCP port 17777 open to both
inbound and outbound traffic.

http://www.solarwinds.com/NetPerfMon/SolarWinds/EOCAdministratorGuide.4.11.htm

HTH
Cancel
Vote Up 0 Vote Down

Cancel
0 Nicki over 15 years ago in reply to BryanBecker

When you say pollers, are you referring to nodes that are being monitored, whereby the NPM server is collecting data from these nodes (I'm just trying to get the vernacular correct)?
thank you, nicki
Cancel
Vote Up 0 Vote Down

Cancel

0 BryanBecker over 15 years ago in reply to Nicki

When you say pollers, are you referring to nodes that are being monitored, whereby the NPM server is collecting data from these nodes (I'm just trying to get the vernacular correct)?
thank you, nicki

Poller is the Orion poller that's monitoring your devices. It's the server running the Orion Poller application. The Main NPM server is the one that talks to the other Orion Pollers on port 17777 in both directions.