Monitor IDRs via Solarwinds Orion

[JaredMitchell]

Hello,

We have 3 Identity routers deployed behind an F5 Load balancer. We would like to monitor the IDR servers, the SSO portal and RADIUS using Solarwinds Orion.

Is this possible via SNMP on the IDRs?

Solarwinds has an agent that can be installed on linux servers but i am unable to get solarwinds to talk to the IDRs, so solarwinds can install the agent.

Any ideas or documentation out there that could assist with this?

Thanks

[LyndalK · Accepted solution]

Hi Jared,

   installation of any software on the IDRs, other than software supplied by RSA for that purpose, is not supported.  An IDR is designed to work as an appliance with a "black box" approach.  Although SSH access to the IDRs is possible, the intention is that it is only to be used for troubleshooting when an issue arises, typically under the guidance of RSA Support.

SNMP is also not supported.  However, there are two URLs available for monitoring each IDR:

• the Identity Router Status Servlet
• the Load Balancer Status Servlet (this one provides just a simple "OK", to indicate availability to a load balancer)

If you think that SNMP would be a useful feature to add to the IDRs in a future release, we encourage you to explain what you need, and the benefits it would provide, on our RSA Ideas page for RSA SecurID Access.  There is also an RSA Ideas FAQ.

[JaredMitchell]

Thank You Lyndal for the response.

I will create an idea for SNMP support.

In my research on this question i found something interesting.

   Adding the specific firewall rule to open port 8080 on all 3 IDRs works fine and i can monitor the status servlet through the F5 load balancer and through solarwinds orion, but if i block port 8080 on 1 of the IDRs, the status servlet still shows active in both the F5 and solarwinds. It took blocking port 8080 on all 3 IDRs before i could get the "application failed" status in both the F5 and solarwinds.

Both the F5 and Solarwinds are monitoring each individual IDR and should be able to show us if the application status on each individual IDR is up or down and alert us accordingly.

So is this how it should be or is there a way to monitor each individual IDR's hosted application to alert us if it is up or down?