CIM 7 Status Polling

[Henry Anderson_2]

I have some servers in a DMZ that we keep having issues with receiving polling status pages every 15 minutes that the server is down even though it is actually up.

The first question I have is do we have to have port 7 (ping) open between the tiers in order to get the polling status to work?

The second question I have is there any other â recommendedâ ways of getting the status of these servers thru the internal firewalls?

T

[Rob Buxton]

If you've discovered the Servers then Ping must be working through to the DMZ.

I've had issues where the Servers are down a slower link, in that case I increased some of the retry levels.

Ping is certainly the easiest to get an Up/Down response.

[Henry Anderson_2]

Our current retry is set to 10 seconds and 2 retries. The servers actually share the same switch, different subnets. One of the servers has actually dropped out of the devices list, and I cannot currently ping the servers from the CIM server, yet they are up and running fine.

What would be an alternate to ping polling if I am unable to convince our firewall team to open up port 7?

[Rob Buxton]

I don't think there is one, the next step up is SNMP and if your Network team will not open Ping, I can't see you allowing SNMP and enabling SNMP on the Servers in the DMZ.

The Discovery protocols in IM are quite restricted, it mentions IPX SAP, but I've no idea what this or how IM uses it.

[Henry Anderson_2]

The main reason I am asking is that I had HP tech support tell me that ping was only used for auto discovery. That would have been ok because I can do manual entries, but is now appearing that it is needed for status polling also. That would be bad news because I will need to go back and redo firewall rules for all of our subnets in the DMZ...

Thank you!

[Rob Buxton]

You'll have to let something through the firewall into the DMZ if you want to monitor them. Ping is the easiest for IM. I've never tried to do without Ping in IM so I really can't advise further.
Another option is to put another monitoring device (IM on another Server?) in the DMZ and get that to monitor and alert separately.