ICMP DISABLED

[John Vitiello]

ICMP is turned off in some of our reginal areas. I setup the hardware status polling task to only use SNMP and this works great. The only problem is that the Status Icon for the server still shows RED under Ping and Green under SNMP and Management Agents. Is there a way to show the server status as green if the requested management method (SNMP in this case) is working properly?

[Scott Shaffer · Accepted solution]

Unfortunately HP SIM currently requires ICMP to be enabled to work. However, this is something we are seriously investigating now - look for a near future version to add some capbilities in this area and for us to extend this over time.

[Scott Shaffer]

When ICMP is disabled, I would assume some other managment protocols are still being allowed, such as UDP for SNMP and TCP for some ports. If HP were to modify HP SIM to have the option to not use ICMP for automatic discovery and reachability of a system there would be a loss of functionality. To avoid this, we could use alternate protocols to achieve similar functionality. For instance we could use TCP to try to connect to a port configured by you and based on errors returned detect if the system was offline or not. The question I would have is would this still be enabled on the network or are most all protocols being blocked by either the routers, switches and possibly a built-in firewall on the server? Or will say TCP ports 2301 for the web agent management still be allowed on the network?

Assuming that at least one or two TCP ports are enabled, would they be the same ports for all systems, or will some systems have one set of ports and a different set have different ports enabled?

[John Vitiello]

Sorry for the late reply, I was out of town. Due to the wonderful MS vulnerabilities we turned off ping replies specifically :-) SSL, HTTP, Telnet and FTP ports are open across our internal networks.

[Jadrice Toussaint]

Scott -

I know thiswill create a lot of overhead on the SIm server side, but why not just use snmp for device statuses and discoveries? It will take longer during the discovery and polling processes but that should eliminate the use of ICMP if nto wanted.

[John Vitiello]

That is what I have done as a work around. The problem is that I can't get the device to turn green (for overall monitiring purposes)in SIM due to the failure of the original ping failure.

[Scott Shaffer]

We could use SNMP, but we were looking for something more uniquitous that could be used as a quick up/down poll.

[Jadrice Toussaint]

Will the Disk Space threshold issues that I continue to have be addressed at the end of march?

[John Vitiello]

I understand. If MS was a bit more secure we wouldn't be having this conversation :-) Thanks!