Posts Tagged ‘nable’

I needed to allows N-able Take Control 

The guide online showed that we had to whitelist  *.mspa.n-able.com , however the firewall could not whitelist Wildcard address. The static address’ are

  • melgw-mct01.mspa.n-able.com
  • sydgw-mct04.mspa.n-able.com
  • sydgw-mct05.mspa.n-able.com
  • sydgw-mct06.mspa.n-able.com
  • sydgw-mct07.mspa.n-able.com
VN:F [1.9.22_1171]
Rating: 0.0/10 (0 votes cast)
VN:F [1.9.22_1171]
Rating: 0 (from 0 votes)

Step by setp video: https://www.youtube.com/watch?v=a5lSbSbq2pY

Does have some back-and-forth config for Huon, the list below is in the ‘ideal’ order.

Pre-Checks:

1) **Ensure Group Policy doesn’t conflict with NABLE**

2) All servers and workstations REQUIRE Nable Agent for Patch management to work

Configured once per client:

Configuration>Patch Management > Caching – Configure the location for the storage + ensure appropriate disk space.

————————————————————————————————————————————————————————–

BELOW: I recommend you create each group you require all at once to save going back and forward.

————————————————————————————————————————————————————————–

Configured per Server/Workstation Group:

Configuration>Filters> Create Sever Groups + Workstation group – clone if applicable from MCAA or NBRS

NB: Specify the Client as the first rule to ensure you do not impact any other client with the same server name

eg. More than 1 client could have a server called ‘MX1’ . That would bring other clients into this patching group.

Configuration>Patch Management> Create Profiles, you CANNOT enable ‘download before install’ until you configure a schedule. So do that then go back to the general tab.

-Set the check for updates 5-10mins apart between server groups (group 1- 06:00, group 2 – 06:10, etc)

-Set the Patch schedule 90mins apart between groups (group 1 – 00:00, group 2 – 01:30, etc)

NB – Associated rules have not been created at this point, but auto configure after the below step is completed.

Configuration> Monitoring> Rules>

-Maintenance Windows are added in this section also.

-Create you maintenance window to match your patch time

Finally – Configuration>Patch Management>Automatic Approvals> Critical + Security Updates + set products, then Set targets.

Then Create Wake on Lan for desktops…

WOL is required for after-hours patching of workstation

VN:F [1.9.22_1171]
Rating: 0.0/10 (0 votes cast)
VN:F [1.9.22_1171]
Rating: 0 (from 0 votes)

 

 

On the Fortigate

 
On the LAN Interface ( Gateway Address ) Enable SNMP
 

Enable SNMP with your chosen Community Name
 
 
Add the Host IP of the local N-able Agent/Server Polling the Device

In Nable

Import Following Service Templates for Fortigate

ServiceTemplateExport

ServiceTemplateExport (1)


Add a new Device via IP Address ( Category Router ) 
 
Add a Professional License so that you can query the Device using SNMP
 

Add Service templates to device

 

 

VN:F [1.9.22_1171]
Rating: 0.0/10 (0 votes cast)
VN:F [1.9.22_1171]
Rating: 0 (from 0 votes)

If you are trying to get the size of your Synology Volume via SNMP < you will need to query the correct Index on the OID .1.3.6.1.2.1.25.2.3.1.3.

Synology does not have standard indexes , so you will need to start by downloading run and install SNMP walk on a machine that can communicate to the device over network

Enter the IP of the device in SNMP Walk ( Leave rest options to default ) and get the output to text File

Open the txt file and do a Search for volume and per below you should fine the list of OID’s

The last number will be the index , for example Index will be 41 fo the volume

.1.3.6.1.2.1.25.2.3.1.3.1 = STRING: “Physical memory”
.1.3.6.1.2.1.25.2.3.1.3.3 = STRING: “Virtual memory”
.1.3.6.1.2.1.25.2.3.1.3.6 = STRING: “Memory buffers”
.1.3.6.1.2.1.25.2.3.1.3.7 = STRING: “Cached memory”
.1.3.6.1.2.1.25.2.3.1.3.8 = STRING: “Shared memory”
.1.3.6.1.2.1.25.2.3.1.3.10 = STRING: “Swap space”
.1.3.6.1.2.1.25.2.3.1.3.31 = STRING: “/”
.1.3.6.1.2.1.25.2.3.1.3.36 = STRING: “/tmp”
.1.3.6.1.2.1.25.2.3.1.3.37 = STRING: “/run”
.1.3.6.1.2.1.25.2.3.1.3.38 = STRING: “/dev/shm”
.1.3.6.1.2.1.25.2.3.1.3.41 = STRING: “/volume1”

VN:F [1.9.22_1171]
Rating: 0.0/10 (0 votes cast)
VN:F [1.9.22_1171]
Rating: 0 (from 0 votes)