Security for Agentless Monitoring

Security for Site24x7 Agentless Server Monitoring

  1. How is performance data sent from the user environment to the Site24x7 Data Center?
    The On-Premise Poller uses a HTTPS connection to send performance data from the user environment to the Site24x7 Data Center.   
  2. Do I need to whitelist any ports/domains to allow access for the agent?
    Yes, whitelist the ports and domains listed in this article to allow access for the agent.
  3. How is server availability calculated?
    The server availability is calculated using the ICMP/TCP protocol.
  4. What data is collected by the On-Premise Poller(s)?
    Performance metrics like CPU, memory, disk usage and network stats are collected by the On-Premise Poller(s) using SNMP (and/or WMI for Windows servers). Additionally, any SNMP OID can be added for monitoring as a custom performance counter. For the complete list of performance metrics, please refer to this article.
  5. How are performance metrics collected?
    The On-Premise Poller collects performance data using SNMP queries (and/or WMI queries for Windows servers). Response time and packet loss are calculated using ICMP/TCP. Learn more.
  6. What details about services and processes are stored in Site24x7?
    The process command line arguments and path are encrypted and stored in Site24x7 for performing service and process monitoring.
  7. Do I need to install the Site24x7 On-Premise Poller on a Windows machine to monitor Windows devices using WMI?
    Yes, for WMI-based monitoring, the Site24x7's On-Premise Poller must be installed on a Windows machine. If you're using On-Premise Poller Groups for monitoring, ensure that all secondary On-Premise Pollers are installed on Windows machines. Check out the other prerequisites for WMI monitoring. 
  8. What access does Site24x7 need to perform agentless monitoring? 
    1. For the On-Premise Poller to function properly, Admin privileges are required.
    2. SNMP credentials of the servers are required. (SNMP Read credential is mandatory and SNMP Write credential is optional.)
    3. WMI credentials are required for monitoring remote Windows servers using WMI query.
    4. ICMP/TCP reachability from the On-Premise Poller to the target response time and packet loss calculation.
  9. Is configuration data stored by Site24x7?
    Yes, but configuration data like credentials, customer details are encrypted and then stored in Site24x7.
  10. What happens to data collection during an outage or communication failure?
    Users can use the High Availability setup for agentless server monitors to ensure data collection happens even during a communication failure.
    If the communication is lost between the On-Premise Poller and Site24x7 Data Center, the data collection will still continue during that period in the On-Premise Poller and the collected data will be pushed to the Site24x7 Data Center once the communication is established.
  11. When does the Site24x7 agent declare an agentless server monitor as Down?
    1. When there is a server shutdown.
    2. During a delay in restarting the server.
    3. If there is a problem in the network communication of the server.
    4. The device/server is not able to ping from the On-Premise Poller

Related Articles
  1. Security for Network Monitoring
  2. Security for Server Monitoring

    • Related Articles

    • Troubleshooting false positive alerts in monitoring

      Problem False positive alerts are being generated. Possible cause The monitoring system is down in some locations. The Website monitor might be configured for one location, such as Seattle, but may appear down when accessed from another location, ...

    • Exclude the selective SSH algorithms in On-Premise Poller during SFTP Transfer monitoring

      By excluding SSH algorithms, you can restrict Site24x7 SSH Client from using the excluded algorithm while connecting to the SSH server during SFTP Transfer monitoring. Follow the steps mentioned below for SSH algorithm exclusion in On-Premise Poller ...

    • Executables and scripts to allow for Windows server monitoring

      One of the reasons you could not enable Site24x7 server monitoring could be your organization's group policy denying access to the executables, scripts, and batch files associated with Site24x7 server monitoring. Mark the following executables, ...

    • Response time in Website monitoring

      In website monitoring, response time is calculated as the total time taken to resolve the DNS, complete the TCP hand-shake, negotiate an SSL handshake (for HTTPS) and download the full HTML output from the server. However, it does not include getting ...

    • Roles supporting tunnel management and path data in VMware VeloCloud SD-WAN

      Introduction In VMware VeloCloud SD-WAN, the ability to create or modify tunnels and view path (tunnel) data depends on the user role. This ensures that configuration changes and diagnostic insights are restricted to authorized users. The table below ...