Skip to content
  • Categories
  • Recent
  • Tags
  • Popular
  • Users
  • Groups
Skins
  • Light
  • Brite
  • Cerulean
  • Cosmo
  • Flatly
  • Journal
  • Litera
  • Lumen
  • Lux
  • Materia
  • Minty
  • Morph
  • Pulse
  • Sandstone
  • Simplex
  • Sketchy
  • Spacelab
  • United
  • Yeti
  • Zephyr
  • Dark
  • Cyborg
  • Darkly
  • Quartz
  • Slate
  • Solar
  • Superhero
  • Vapor

  • Default (Flatly)
  • No Skin
Collapse
Brand Logo

NetXMS Forum

  1. Home
  2. Support
  3. Agent Encryption - Win 2008 R2

Agent Encryption - Win 2008 R2

Scheduled Pinned Locked Moved Support
4 Posts 3 Posters 18.8k Views
  • Oldest to Newest
  • Newest to Oldest
  • Most Votes
Reply
  • Reply as topic
Log in to reply
This topic has been deleted. Only users with topic management privileges can see it.
  • A
    A
    aengel
    wrote on last edited by
    #1

    Hi,

    I am configuring NetXMS on a CentOS 6 server. My main goal is to secure monitoring services within my network. I just finished getting all Cisco devices to SNMPv3 and it works great with NetXMS.

    I have a mix of Server 2003 and 2008R2 machines that I would like to force encryption on the agents. I saw an earlier post where someone was asked about whether they compiled from source and included encryption. I compiled from source so I went and checked my config.log file and it looked ok (I attached a part of the config.log file)

    Is there any guidance on configuring encryption on Windows server agents?

    Thank you,
    A


    netxms_lcrypto.txt

    1 Reply Last reply
    0
    • A
      A
      Alex Kirhenshtein
      wrote on last edited by
      #2

      Encryption is used by default, however it's a subject to supported ciphers and negotiation during initial handshake — with plain text fallback. To ensure that network traffic is always encrypted (or connection is rejected), add "RequireEncryption=yes" to nxagentd.conf.

      1 Reply Last reply
      0
      • A
        A
        aengel
        wrote on last edited by
        #3

        Thank you Alex!

        1 Reply Last reply
        0
        • V
          V
          Victor Kirhenshtein
          wrote on last edited by
          #4

          Another option is to change server configuration parameter DefaultEncryptionPolicy. Possible values are:

          0 - never use encryption
          1 - use encryption only if agent requests it
          2 - always use encryption, fallback to unencrypted channel if agent does not support encryption
          3 - always use encryption, close connection if agent does not support encryption

          Best regards,
          Victor

          1 Reply Last reply
          0

          Hello! It looks like you're interested in this conversation, but you don't have an account yet.

          Getting fed up of having to scroll through the same posts each visit? When you register for an account, you'll always come back to exactly where you were before, and choose to be notified of new replies (either via email, or push notification). You'll also be able to save bookmarks and upvote posts to show your appreciation to other community members.

          With your input, this post could be even better 💗

          Register Login
          Reply
          • Reply as topic
          Log in to reply
          • Oldest to Newest
          • Newest to Oldest
          • Most Votes


          • Login

          • Don't have an account? Register

          • Login or register to search.
          Powered by NodeBB Contributors
          • First post
            Last post
          0
          • Categories
          • Recent
          • Tags
          • Popular
          • Users
          • Groups