Solved

SNMP v3 on Windows 2008 R2 SP1

Posted on 2013-06-20
4
4,244 Views
Last Modified: 2013-06-24
Hi,

We are looking to use SNMP version 3 for monitoring our Windows 2008 R2 SP1 servers, however it looks like Windows 2008 R2 doesn't support version 3.  We are looking to take advantage of the enhanced security with v3, and as a result I have had a bit of a look at the following third party software.

http://www.snmp-informant.com/index.htm

It does seem to get a bit expensive though when we are looking to monitor more than 25 machines.  I don't mind paying if the product is worth it, so was wondering if anyone had feedback on this product.  Alternatively if someone has used another product that is cost effective, reliable, and secure I'd appreciate the heads up.

Any feedback would be greatly appreciated.

Thanks,
Dave
0
Comment
Question by:biggles70
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 2
4 Comments
 
LVL 38

Accepted Solution

by:
Rich Rumble earned 500 total points
ID: 39264474
http://www.ndt-inc.com/SNMP/AgentService.html (prices are all over the place..)
http://thwack.solarwinds.com/community/solarwinds-community/product-blog/blog/2009/12/01/i-want-to-monitor-my-windows-boxes-with-snmpv3-but-windows-doesn-t-support-snmpv3-how-can-i-monitor-my-devices (people report that it works for some but not all windows hosts, openssl version might affect the success) - it's free though.

I don't know anyone using SNMP for windows any more, it's all powershell or WMI, both can integrate with AD better than SNMP ever has/will. PS and WMI also support secured/encrypted connections.
-rich
0
 
LVL 25

Expert Comment

by:Cyclops3590
ID: 39265580
I whole-heartily agree with richrumble.  Yes, SNMP is there and if your application can only do SNMP, then you're stuck aren't you.  However it is very limited compared to the more robust WMI/Powershell.  I would give a look at PS if I were you.  It's quite good.

BTW, don't accept this is part of a solution.  Personally, I just don't like "stealing" points with what are effectively "ditto" comments.  Just wanted to lend more credence that richrumble is correct in case you were hesitant about his answer.
0
 

Author Closing Comment

by:biggles70
ID: 39270155
Thanks for the responses - totally agree about the SNMP and WMI monitoring etc...  The suggested links were the only ones I was able to locate...

Problem is that the monitoring software we have only supports encryption with SNMP v3 and no encryption with WMI.  To add to this further the software support promotes SNMP monitors over WMI because of Windows performance issues with WMI

Anyway thanks for the info, and might be time for a new monitoring platform.

Cheers,
Dave
0
 
LVL 38

Expert Comment

by:Rich Rumble
ID: 39271592
Might consider writing to the vendor for a patch that add's something like
"winmgmts:{impersonationLevel=impersonate,authenticationLevel=pktPrivacy,(Security)}!//.\\root\\cimv2")

The "authenticationLevel=ypktPrivacy" should do the trick. It doesn't hurt any connections or other settings, and some namespaces require the setting.
-rich
0

Featured Post

Forrester Webinar: xMatters Delivers 261% ROI

Guest speaker Dean Davison, Forrester Principal Consultant, explains how a Fortune 500 communication company using xMatters found these results: Achieved a 261% ROI, Experienced $753,280 in net present value benefits over 3 years and Reduced MTTR by 91% for tier 1 incidents.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

When you try to share a printer , you may receive one of the following error messages. Error message when you use the Add Printer Wizard to share a printer: Windows could not share your printer. Operation could not be completed (Error 0x000006…
This article is a collection of issues that people face from time to time and possible solutions to those issues. I hope you enjoy reading it.
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
Michael from AdRem Software outlines event notifications and Automatic Corrective Actions in network monitoring. Automatic Corrective Actions are scripts, which can automatically run upon discovery of a certain undesirable condition in your network.…

724 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question