8 Replies Latest reply on Oct 30, 2015 12:27 PM by hoppingubu

Looking for a way to monitor a site

hoppingubu Oct 29, 2015 2:43 PM

Due to security requirements, ICMP is being denied on the firewall that we have to get through. This has provide detrimental to our monitoring capability of a remote site. In fact, there are issues with snmp traps, but that is something I can clear up. Is there a way to monitor heartbeats across the WAN when ICMP has been blocked? Would an instance of SolarWinds at the remote site forwarding information on the heartbeats of the equipment there and forward the data to the SolarWinds instance at my location.

Thank you.

Robert

Re: Looking for a way to monitor a site

zackm Oct 29, 2015 2:47 PM (in response to hoppingubu)
You could either place a remote poller at the location behind the firewall and allow it to collect "local" statistics and push those back to the main poller. (Depending on the target nodes, you could also use an agent for this). Or you could set your target nodes up to gather availability statistics via SNMP and then open UDP 161 across the firewall.

-ZackM
Loop1 Systems: SolarWinds Training and Professional Services
LinkedIN: Loop1 Systems
Facebook: Loop1 Systems
Twitter: @Loop1Systems
Like Show 0 Likes(0)

Actions
- Re: Looking for a way to monitor a site
  
  hoppingubu Oct 29, 2015 3:22 PM (in response to zackm)
  
  The target nodes (network devices) were set up to gather the SNMP information and push across via UDP port 161, but I will have to verify just to make sure. Otherwise, I will set up another server as a remote poller and have it push those through. Is there are ports that I should be concerned with? If I have to, I will have to request the port be open in the firewall.
  
  Like Show 0 Likes(0)
  
  Actions
  - Re: Looking for a way to monitor a site
    
    zackm Oct 29, 2015 4:18 PM (in response to hoppingubu)
    
    If you already have SNMP queries working from SolarWinds to the nodes, then you just need to edit the way that SolarWinds gathers availability metrics on those specific devices.
    
    Settings > Manage Nodes > Select a Device > List Resources > Status & Response Time > SNMP
    
    Otherwise, if you want to use Additional Pollers, there will be extra costs in licensing and you will need ports opened: http://www.solarwinds.com/documentation/Orion/docs/SolarWindsPortRequirements.pdf
    
    Like Show 0 Likes(0)
    
    Actions
    - Re: Looking for a way to monitor a site
      
      hoppingubu Oct 29, 2015 5:39 PM (in response to zackm)
      
      I believe that I have that checked off. Every time I add a node, I go in and make sure that SNMP is checked off. Having said that, I can't access the device to select the resources to ensure that it is indeed checked off. I do know using the document submitted to the firewall guys that the UDP ports 161 and 162 are open and there should be a path from there to here. I think that there may be some other issue coming into play here that is messing my monitoring up besides ICMP being denied at the firewall. I'll keep working at it.
      
      Thanks for some insight.
      
      Like Show 0 Likes(0)
      
      Actions
      - Re: Looking for a way to monitor a site
        
        lynchnigel Oct 30, 2015 2:19 AM (in response to hoppingubu)
        
        You can use a port scanner to check online or there is this thread that relates to testing it if you have access to the network infrastructure
        SNMP 161, 162, 1993 TCP or UDP | Other Network Infrastructure Subjects | Cisco Support Community | 5981 | 9099536
        
        Like Show 0 Likes(0)
        
        Actions
- Re: Looking for a way to monitor a site
  
  michael.kent Oct 30, 2015 6:04 AM (in response to zackm)
  
  We are in the same situation, however remote poller pricing, for what is just monitoring a single location with a single device is cost prohibitive.
  
  Like Show 0 Likes(0)
  
  Actions
  - Re: Looking for a way to monitor a site
    
    zackm Oct 30, 2015 8:09 AM (in response to michael.kent)
    
    Trust me, I get that. Have you talked to anyone about the new Remote Office Pollers? My understanding is that this new licensing is made for small remote sites in istuations just like this with a price point that is a little easier to handle than the full price of an Additional Poller.
    
    If you're interested, feel free to message me and I can get someone in touch to talk to your about options and available discounts.
    
    Just a thought.
    
    -ZackM
    Loop1 Systems: SolarWinds Training and Professional Services
    LinkedIN: Loop1 Systems
    Facebook: Loop1 Systems
    Twitter: @Loop1Systems
    1 of 1 people found this helpful
    
    Like Show 1 Likes(1)
    
    Actions
    - Re: Looking for a way to monitor a site
      
      hoppingubu Oct 30, 2015 12:27 PM (in response to zackm)
      
      Because I deal with the government, I will have to wait until they stand up a VPN tunnel for our organization to reach the remote organization. Even though ICMP will still be blocked, I am hoping that the SNMP information will come through and show that the network device is up and operational instead of staring at a red dot. Having said that... If it still doesn't work, then I will look into the remote office poller for all our outlying areas beyond the firewall.
      
      Thanks for the input to resolving my problem. Much appreciated.
      
      Like Show 1 Likes(1)
      
      Actions

Go to original post