NAgios and ISASERVER

[Giles Coochey]

> Me no hablo espanol...
> 
> Maybe you could try and ask in english. Then more people will be able to
> understand you.
> 

Hi, they're trying to get events from their Microsoft ISA Server and they're getting the error shown. They've opened the port and set up the rules for both incoming and outgoing packets. They also added the system as an authorised manager of the ISA Server. But they still get the error.

This appears to be a NSClient++ issue from the GIF they embedded in the email.

I would like to know whether they can netcat or telnet to whatever port NSClient++ is configured to use to confirm that the Firewall on the ISA Server really is correctly configured.
I'd also like to know whether NSClient++ really is running on the ISA Server system.
As it's a firewall the best way to troubleshoot this would be to run packet captures on both systems (Nagios and ISA) and confirm whether filtering is hampering the monitoring of the server.

Thanks

Giles

> Regards,
> 
> Sander
> 
> CARVAJAL M, Héctor E. / FMO 3093 wrote:
> >   Buenos días, estamos tratando de tomar los eventos de nuestro
> > servidor ISASERVER y nos dá este error. En el servidor ya abrimos el
> > puerto y creamos las reglas de entrada y salida. También agregamos la
> > máquina como estación autorizada para la administración del ISA y sin
> > embargo nos sigue dando error.
> >
> >    Agradecido de sus comentarios al respecto.
> >
> >     Hector Carvajal
> >     Analista de seguridad de Infraestructura
> >
> > *Host **Sort by host name (ascending)*
> > <http://170.100.150.38/nagios/cgi-
> bin/status.cgi?host=all&hoststatustypes=4&sorttype=1&sortoption=1>*Sort
> > by host name (descending)*
> > <http://170.100.150.38/nagios/cgi-
> bin/status.cgi?host=all&hoststatustypes=4&sorttype=2&sortoption=1>**
> >
> >
> >
> > *Service **Sort by service name (ascending)*
> > <http://170.100.150.38/nagios/cgi-
> bin/status.cgi?host=all&hoststatustypes=4&sorttype=1&sortoption=2>*Sort
> > by service name (descending)*
> > <http://170.100.150.38/nagios/cgi-
> bin/status.cgi?host=all&hoststatustypes=4&sorttype=2&sortoption=2>**
> >
> >
> >
> > *Status **Sort by service status (ascending)*
> > <http://170.100.150.38/nagios/cgi-
> bin/status.cgi?host=all&hoststatustypes=4&sorttype=1&sortoption=3>*Sort
> > by service status (descending)*
> > <http://170.100.150.38/nagios/cgi-
> bin/status.cgi?host=all&hoststatustypes=4&sorttype=2&sortoption=3>**
> >
> >
> >
> > *Last Check **Sort by last check time (ascending)*
> > <http://170.100.150.38/nagios/cgi-
> bin/status.cgi?host=all&hoststatustypes=4&sorttype=1&sortoption=4>*Sort
> > by last check time (descending)*
> > <http://170.100.150.38/nagios/cgi-
> bin/status.cgi?host=all&hoststatustypes=4&sorttype=2&sortoption=4>**
> >
> >
> >
> > *Duration **Sort by state duration (ascending)*
> > <http://170.100.150.38/nagios/cgi-
> bin/status.cgi?host=all&hoststatustypes=4&sorttype=1&sortoption=6>*Sort
> > by state duration time (descending)*
> > <http://170.100.150.38/nagios/cgi-
> bin/status.cgi?host=all&hoststatustypes=4&sorttype=2&sortoption=6>**
> >
> >
> >
> > *Attempt **Sort by current attempt (ascending)*
> > <http://170.100.150.38/nagios/cgi-
> bin/status.cgi?host=all&hoststatustypes=4&sorttype=1&sortoption=5>*Sort
> > by current attempt (descending)*
> > <http://170.100.150.38/nagios/cgi-
> bin/status.cgi?host=all&hoststatustypes=4&sorttype=2&sortoption=5>**
> >
> >
> >
> > *Status Information*
> >
> > Servidor_ISASERVER
> > <http://170.100.150.38/nagios/cgi-
> bin/extinfo.cgi?type=1&host=Servidor_ISASERVER>
> >
> >
> >
> >
> >
> >
> > C:\ Drive Space
> > <http://170.100.150.38/nagios/cgi-
> bin/extinfo.cgi?type=2&host=Servidor_ISASERVER&service=C%3A%5C%20Drive%20S
> pace>
> >
> >
> >
> >
> >
> >
> > CRITICAL
> >
> >
> >
> > 01-21-2008 15:44:33
> >
> >
> >
> > 0d 16h 3m 44s
> >
> >
> >
> > 1/3
> >
> >
> >
> > CRITICAL - Socket timeout after 10 seconds
> >
> >
> >
> >
> > CPU Load
> > <http://170.100.150.38/nagios/cgi-
> bin/extinfo.cgi?type=2&host=Servidor_ISASERVER&service=CPU%20Load>
> >
> >
> >
> >
> >
> >
> > CRITICAL
> >
> >
> >
> > 01-21-2008 15:47:49
> >
> >
> >
> > 0d 16h 1m 29s
> >
> >
> >
> > 1/3
> >
> >
> >
> > CRITICAL - Socket timeout after 10 seconds
> >
> >
> >
> >
> > Memory Usage
> > <http://170.100.150.38/nagios/cgi-
> bin/extinfo.cgi?type=2&host=Servidor_ISASERVER&service=Memory%20Usage>
> >
> >
> >
> >
> >
> >
> > CRITICAL
> >
> >
> >
> > 01-21-2008 15:50:04
> >
> >
> >
> > 0d 15h 59m 13s
> >
> >
> >
> > 1/3
> >
> >
> >
> > CRITICAL - Socket timeout after 10 seconds
> >
> >
> >
> >
> > NSClient++ Version
> > <http://170.100.150.38/nagios/cgi-
> bin/extinfo.cgi?type=2&host=Servidor_ISASERVER&service=NSClient%2B%2B%20Ve
> rsion>
> >
> >
> >
> >
> >
> >
> > CRITICAL
> >
> >
> >
> > 01-21-2008 15:52:20
> >
> >
> >
> > 0d 16h 5m 57s
> >
> >
> >
> > 1/3
> >
> >
> >
> > CRITICAL - Socket timeout after 10 seconds
> >
> >
> >
> >
> > Uptime
> > <http://170.100.150.38/nagios/cgi-
> bin/extinfo.cgi?type=2&host=Servidor_ISASERVER&service=Uptime>
> >
> >
> >
> >
> >
> >
> > CRITICAL
> >
> >
> >
> > 01-21-2008 15:44:36
> >
> >
> >
> > 0d 16h 3m 41s
> >
> >
> >
> > 1/3
> >
> >
> >
> > CRITICAL - Socket timeout after 10 seconds
> >
> >
> >
> > El servidor esta agregado para ser monitoreado, pero no envía ningún
> > traps de status por el bloqueo del puerto.
> > ------------------------------------------------------------------------
> >
> > ------------------------------------------------------------------------
> -
> > This SF.net email is sponsored by: Microsoft
> > Defy all challenges. Microsoft(R) Visual Studio 2008.
> > http://clk.atdmt.com/MRT/go/vse0120000070mrt/direct/01/
> > ------------------------------------------------------------------------
> >
> > _______________________________________________
> > Nagios-users mailing list
> > Nagios-users at lists.sourceforge.net
> > https://lists.sourceforge.net/lists/listinfo/nagios-users
> > ::: Please include Nagios version, plugin version (-v) and OS when
> reporting any issue.
> > ::: Messages without supporting info will risk being sent to /dev/null
> 
> 
> -------------------------------------------------------------------------
> This SF.net email is sponsored by: Microsoft
> Defy all challenges. Microsoft(R) Visual Studio 2008.
> http://clk.atdmt.com/MRT/go/vse0120000070mrt/direct/01/
> _______________________________________________
> Nagios-users mailing list
> Nagios-users at lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/nagios-users
> ::: Please include Nagios version, plugin version (-v) and OS when
> reporting any issue.
> ::: Messages without supporting info will risk being sent to /dev/null

-------------------------------------------------------------------------
This SF.net email is sponsored by: Microsoft
Defy all challenges. Microsoft(R) Visual Studio 2008.
http://clk.atdmt.com/MRT/go/vse0120000070mrt/direct/01/
_______________________________________________
Nagios-users mailing list
Nagios-users at lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/nagios-users
::: Please include Nagios version, plugin version (-v) and OS when reporting any issue. 
::: Messages without supporting info will risk being sent to /dev/null