Home

GFI Network Server Monitor, UPG, 5-24u

1. does not use more than the following hard disk space has at least the following free hard disk space fi 024 KB 7 G Click here to load a sample lt Back n gt Cancel Screenshot 88 Disk Space check parameters dialog A Disk Space function requires the following parameters e Check that the Drive Specify the drive to be checked e Does not use more than the following hard disk space Enable this option and specify the maximum disk space in KB MB or GB allowed for use on this particular drive i e the check will fail if the used disk space exceeds the specified value e Has at least the following free hard disk space Enable this option and specify the minimum free space value allowed on this particular drive i e the check will fail if free disk space is less than the specified amount Daemon check GFI Network Server Monitor can check if a target daemon is running on a target Linux Unix computer Daemons are background programs that run without human intervention to accomplish a specific task usually providing a service The daemon check uses Secure Shell SSH to remotely execute a Linux Shell script which determines the state i e running or stopped of a specific daemon GFI Network Server Monitor Configuring monitor functions e 93 New Check Daemons Checks if daemons are running on a target computer s Screenshot 89 Daemon check properties dialog Th
2. NSMAdministrator Properties Ed General Working hours Alerts Member Of Specify the general details for this user as well as the parameters to use for the various notification methods when important events happen yj vivii Marked time intervals are considered as work time Un Marked times will be considered as outside of working time You can configure different notification methods for important events which happen during and outside of working time Cancel Apply Screenshot 135 Working Hours Setup dialog NOTE Marked hours indicate working time To setup working hours click on the Working hours tab and then click on the working hours that you need to mark unmark TIP To mark unmark a whole day click on the day e g MONDAY displayed on the left of the hours setup grid TIP To mark the same hour for a whole week click on at the top of the relative hour column GFI Network Server Monitor Users and Groups e 151 Define alerts to be used You can specify what alerts if any are to be sent on the occurrence of important events during and or outside of working hours This is based on the working hours specified for this user e g you can configure GFI Network Server Monitor to send SMS Pager alerts to this user ONLY when an event occurs outside normal working hours For further information on how to setup the w
3. Enable this option to resolve IP addresses and display the computer name e Scan Query Timeout Timeout value in ms which defines the time that a query is allowed to run before being stopped 2 Click on Retrieve to start SNMP audit SNMP walk The SNMP walk allows you to gather SNMP information The right pane contains a list of names symbolizing specific Object ID s on the device To find out more about the information provided by the SNMP walk you will have to check with the vendor Some vendors provide great details on what each piece of information means others though their devices support SNMP provide no documentation on it at all NOTE SNMP will help malicious users learn a lot about your system making password guessing and similar attacks much easier Unless GFI Network Server Monitor Network tools e 167 this service is required it is highly recommended that SNMP is turned off FE GFI Network Server Monitor 7 0 Oy x File Tools Help i i Todi Ete a iP aadress 1781613015 7 Obiect ip fi Retrieve GFI Network Server Monitor E Monitoring Checks Configuration es Options a GQ ABC LTD Description iso Cei TMJASON H Q DEF LTD Name Community string to query m r aa een C Use default community string public Program Configuration ae k ys Use altemative community string 5 rectory TA Uen ard
4. Apply to accept the current configuration GFI Network Server Monitor Configuring GFI Network Server Monitor e 33 Restart computers services after an alert is triggered Settings Services Machine Restart General Services Machine restart mi When the check fails I Reboot the machine being checked IV Reboot the following computer Hostname IP fiso168130250 0 amp amp Select IV Restart the service s on the following computer Hostname IP JTMJASON tt i lt it sw S Select Servicefs o dd DN Remove When specifying services to restart you can specify either the internal service name or the service display name Cancel Screenshot 29 Services Computer restart setup dialog GFI Network Server Monitor can be set to remotely reboot a computer or restart specific services whenever a monitoring check fails e g if you can t reach an IIS web server in your LAN you can restart the W8SVC service Configure this action as follows 1 Right click on the check to be configured and select Properties By default the check properties dialog will open in the General tab 2 Click on the Actions Tab If the Inherit reboot computer services parameters from Parent folder option is selected unselect it and click on Settings in the run external file area 3 To reboot the computer being checked select the Reboot the com
5. Service Cente COM Port 1 Baud Rate 9600 Initialisation St Optional settings Edit Retries E times Format SMS message Concel ae Screenshot 107 The in built GSM SMS Server properties Requirements 1 A GSM modem or GSM phone that is capable of processing AT C commands This GSM device must be connected to the server running GFI Network Server Monitor 2 Subscription to an SMSC provider Configuring the In built GSM SMS Server To configure the in built GSM SMS Server 1 Right Click on the Alerting Options node and select Properties 2 Click on the SMS tab and from the SMS System dropdown select In built GSM SMS Server GFI Network Server Monitor Global alerting options e 114 Edit Property xi le Property Service Center Number Value 21 64221258 G This should be set to your GSM provider s SMS service center number SMSC Cancel Screenshot 108 Edit Property dialog 3 Double click on the property which you want to configure e g Service Center Number and specify the necessary parameters in the Edit Property dialog NOTE When configuring properties always specify the details supplied to you by your SMSC provider If configuration parameters are not available ask your provider to supply you with the required information The In built GSM SMS Server requires the following parameters e Service Center Number
6. e VB Function Parameters In the parameters list specify any additional parameters required by this function During check execution these parameters will be automatically passed on to the VB script in the order specified in the VB Function Parameters list To add a parameter double click on the position row where you wish to add this additional parameter and specify the required values in the parameters dialog Parameter values can be specified as a string number or can be passed on through system variables e g YUSERNAME NOTE 1 Strings must always be specified within double quotes e g Mail Server NOTE 2 You may make changes to the selected script file by clicking on the Edit script button NOTE 3 The Generic Secure Shell SSH Check requires logon credentials i e username and password or Private Key file to connect authenticate and run SSH scripts on a remote Unix based target computer These credentials must be specified from the Logon Credentials tab available in the properties of the relative check For more information on logon credentials please refer to the Logon credentials section in the Configuring GFI Network Server Monitor chapter OS Object Performance Counter The OS Object Performance Counter establishes the performance of an operating system object available on the target computer by checking its properties New Check OS Object Performance Counter
7. 0 ccceccccesssececeesneeececaeeeeecaaeeececaeeeeecaeeeesenaeeeeseaas 58 Windows OS generic checks cccceceeceeceeeeeeaeeeeeeeceeeeeceaeeeseaeseeeeeseeeeesaeeeeaeeeeeeeeaas 60 Generne VBA SGripty ciicSececvcssccssanevenseesdicebestecadsnpeg tcbaeueeceysagse ATENa Si ie a neers tickets 60 OS Object Performance Counter 0 ccccecccceeceeceeeeeeeaeeeeeeeseeeeeseaeeeeeeeeeeeeeaas 61 Command Line executable output eeeeeeeeeeeeeeeeeeeeeeeeeeceeeeeeaeeeeaaeeeeeeetaas 62 Process Properties Memory CPU Handles etc ccccececsesceeesssseeeseeeeees 63 Windows operating system CHECKS 2 0 0 eceeeeeeeeeeeeeeeeeeeaeeeeeeaaeeeeeeaaeeeseeaaeeeseeaeeeeseaas 64 Eveni LOGS Sae ena errr cree creer ere cence errereree re errereer T 64 ile amp iExistencen enea a erie rer a a a erect ee rerreeeeree 66 DIE E oele e EAA T A E E E T 67 EA e e E E E E E T E EE T e 67 eee AUE Te AAE EE ET T E 69 Dir ctory Folder Size y perna aaa aaa Sure RC ener es 69 Ple DIZE sr a a E a sauatans ieaiateaeneatiamesl as 70 LOAP QUGTY a E ET AA A 71 Physical disk conditions CHECK c ceceeeeeeeeeeeeeeeeeeeeeeeeseeeeeeeeeneeeeeteneeeeeeeneaees 72 Printer availability cnisia a eii aaea a NE aiie 73 Process RUNMING scronsiiaenii aiena aa e ea a aE N 74 Users and Group Membership cccceeeceeeceeeeeeeeeaeeeeeeeseeeeeseaeeeenaeeseneessaees 75 Windows applications checks 00 ecceeeeeeee eect ee eeeeeeeeeeeaaeeeseeaaeeeseeaaeeese
8. F File existence 3 5 66 File size function 3 5 FTP 4 43 functional parameters 26 G general parameters 25 150 169 GSM 114 131 H HTTP function 4 GFI Network Server Monitor ICMP ping 4 inheritance 2 installation 9 12 15 137 140 173 L License 8 Linux Unix OS generic checks 83 Linux Unix Operating System Checks 85 logon credentials 14 23 27 42 109 162 Logon Credentials 15 27 42 43 162 Maintenance 36 37 maintenance periods 6 37 maintenance schedule 37 Message Templates 130 131 Monitoring Check Wizard 19 N nested folders 1 3 Nested folders 3 95 network alerts 28 Network Alerts 29 network message 2 Network Monitor Engine 1 7 59 124 Network Monitor Manager 8 Network Support Tools 6 Network tools 160 Network Internet monitor functions 41 NNTP 4 45 NTP 4 49 P pager 1 2 Pager 28 131 Physical Disk Condition function 3 POP3 4 46 Printer availability function 3 5 Process Running function 4 5 Properties 63 64 68 97 108 109 110 112 114 117 119 122 125 128 129 130 134 135 142 143 145 property inheritance 1 2 37 Q Quick Start Wizard 1 2 16 17 Indexe 179 R Reporting 6 reporting tool 155 reports 6 155 S Services function 3 SMS 1 2 28 29 30 112 124 125 128 129 130 131 SMSC 2 124 126 127 128 129 130 SMTP server 4 29 48 SNMP 5 58 59 105 SNMP monitoring checks
9. GFI Network Server Monitor 7 0 Manual By GFI Software Ltd GFI http www gfi com E mail info gfi com Information in this document is subject to change without notice Companies names and data used in examples herein are fictitious unless otherwise noted No part of this document may be reproduced or transmitted in any form or by any means electronic or mechanical for any purpose without the express written permission of GFI SOFTWARE Lid GFI Network Server Monitor is copyright of GFI SOFTWARE Ltd 2000 2009 GFI SOFTWARE Lid All rights reserved Version 7 0 last updated April 17 2009 Contents Introduction Introduction to GFI Network Server Monitor GFI NSM Key toties a is este eed a E R A eee GFI Network Server Monitor component ccccceeeeeeeesteeeeneeee Network Server Monitor Engine cccceeseeeeeeeeteeeeeeeee Network Server Monitor configuration Network Server Monitor Attendant 0 cccceceeeeeseeeeneees License SCNOME arerin rara a E R Installing GFI Network Server Monitor System requirements cccecceceeeeeeeeeeeeeeeeeeeeeaeeeeaeeseeeeesaeeesaeseeeeeeaas Supported operating systems x86 or X64 eeceeeeesteeeeeees Other components cceeeeeeeeeeeceeeeeeeeeeeeeeeseeeetaeeeeeeeeeeeee Target computer COMPONENTS eeeeeeeeeeteeeeeteteeeeeenaeeeeee Hardwarea cas ecce rect ae araea aaa aa iaaa ia ATA Aaaa datachedanvers Installation pro
10. Message Format xi E mail Message Format Subject RAMS ma Aa A Message PRODUCTNAME email notification Date 4DATE Time 2TIME Check name CHECK_NAMEX Target machine CHECK_TARGET Status 4CHECK_RESULT Explanation CHECK_EXPLANATION Format Plaintext Rich text HTML Screenshot 104 Format Email Message NOTE For more information on variables and message template formatting please refer to the Message Template section in this chapter To make changes in the email message 1 Right click on the Alerting Options node and select Properties The alerting properties will open by default in the Email Alerts configuration dialog i e Email tab 2 Click on Format Email Message and specify the following parameters e Subject Specify the text to be included in the message s subject field By default the subject field is set to include the contents of the CHECK_NAME variable i e the name of the monitoring check that triggered the alert GFI Network Server Monitor Global alerting options e 110 e Message Specify the contents of the message body We recommend that in the message body you include details related to the event which triggered the alert By default the message body includes the following information PRODUCTNAME email alert Product short name i e GFI N S M Date DATE The date when the alarm was triggered Time TIME
11. Network Zone 1 a ANDREM a Status Check Name Date ii More Int E OS and Services Chect E Domain Services Cl E Hardware Checks ni 04 WebServer Checks Disabled jason gfi com Email Route 8 5 2005 ie On Hold 5 ey GANE ServerMonitor ABC Ltd Q Disabled Jason Server Service 8 5 2005 an On Hold Application Firewal Mail Server Check Q Disabled HTTP HTTPS www gfi com 8 5 2005 re On Hold Database Backer J ANGELICA J DAVIDNF E JASON 2005 All rights reserved GFI Software Ltd Home Products Su v a orerrer D BP Screenshot 94 The Folder contents page To view the status of the checks contained in a folder click on the folder name This will open the folder contents page which shows information on the checks located in that folder This information includes the present status of these checks To select another folder return to the home page by clicking on the Home link located at the top left of this page GFI Network Server Monitor Monitoring checks status e 100 Viewing all the checks File Tools Help El B Tools Explorer a SECURITY amp MESSAGING SOFTWARE Monitoring Checks Configuratic d ABC LTD TMJASON Qj DEF LTD xvZLTp Status All Checks Monitoring Checks Status g Program Configuration L I Users and Groups sason OO O JASON Q Users E amp os and Services Checks g Rima d
12. Users and Groups 1 80 84 18 137 E Traceroute response settings Q Users 1 130 117 0 25 Return timeout after 1000 D Groups 1 130 117 1 158 Slow response icor 250 Alerting Options 1 130 117 1 101 Timeout steps befor 3 General Options 1 130 117 1 122 Very slow response 600 Database Maintenan 1 66 28 4 206 5 Tools 1 66 28 4 161 Ze Enumerate Computer 1 66 250 15 82 Enumerate Processe 1 205 198 2162 Ze DNS Lookup 1 66 35 174 117 F Whois 1 66 35 174 13 1 66 0 246 254 SNMP A i 1 216 107 105 165 Request timed out p hele 1 66 184 128 34 1 216 83 239 110 1 216 107 108 131 1 216 107 105 165 Screenshot 152 Traceroute Setup window 1 Specify the following parameters e Domain IP Name Specify the targeted destination e Do Not resolve IPs Enable this flag to indicate that only the IP Address is required to be displayed e Repetition Frequency Define if the function is to be run more than once and specify the interval between each run 2 Click on Traceroute to start the trace SNMP audit The SNMP audit tool allows you to perform an SNMP audit on a device and audit for weak community strings Some network devices will have alternative or non default community strings The dictionary file contains a list of popular community strings to check for The default file it uses for the dictionary attack is called snmp pass txt You can either add new community names to this file or direct the SNMP audit t
13. Version Information GFI Network Server Monitor 7 0 Copyright c 2000 2005 GFI Software Ltd GFI Network Server Monitor 7 0 4A Windows WININET error has occurred while retrieving product updates information Error code 12111 Version 7 0 Build 20051007 Check for latest version on website Build Updates IV Check for newer builds on startup Cancel Apply Screenshot 158 Check for Newer Builds GFI Network Server Monitor Other features e 171 To check for newer builds right click on Version Information in the General Node and selecting Check for Newer Build Licensing PE GFI Network Server Monitor 7 0 oix a E GFi SECURITY amp MESSAGING SOFTWARE Licensing File Tools Help lm Tools Explorer GFI Network Server Monitor a Monitoring Checks Configuration Monitoring Checks Status El amp Program Configuration H Tools General GA Version Information sing How to purchase Support Center Knowledge Base GFI LANguard N S S GFI LANguard P S C GFI LANguard S E L M GFI Network Server Monitor GFI Network Server Monitor 7 0 Copyright c 2000 2005 GFI Software Ltd Product status Evaluation Version Evaluation version 90 days 15 days passed Number of IPs Computers limit Unlimited License key Evaluation NOTE To license your installat
14. 3 Folder s 3 Monitoring Check s Screenshot 34 Check Status display and relative options GFI Network Server Monitor allows you to enable disable existing monitoring checks The icon on the left of the check details will indicate its state Th Monitoring check enabled Monitoring check disabled To enable a monitoring check Right click on the monitoring check and select Enable To disable a monitoring check Right click on the monitoring check and select Disable Testing checks for correctness To verify that a check is properly configured right click on a check and select Monitor Now GFI Network Server Monitor Configuring GFI Network Server Monitor e 39 EQ Monitoring JASON ICMP Ping can ping Processing check Succeeded Reply from JASON time Oms HOTE This is a dry run test to help set up the proper parameters for the monitoring check No email sms network notifications are sent out when the Monitor Now option is used hen this monitoring check will fail the following groups will be notified Email Notifications NSMA administrators SMS Hotifications NSMAdministrators Hetwork Hotifications NSMAdministrators Screenshot 35 The Monitor Now dialog NOTE When running a check through the Monitor Now utility no alerts or actions are triggered whenever a check fails Move checks between existing folders To move checks from one folder to another
15. E Tools Ze Enumerate Computers Zg Enumerate Processes Ze DNS Lookup Monitoring Checks Configuration Configure the checks to be made to ensure continuous uptime of the machines on your network Monitoring Checks Status View the monitoring checks overall status Zg Whois amp Traceroute Program Configuration sahil Contains tools which allow you to configure the NSM users and groups as well as choose how be i i users are notified about important events a eneral 6 Version Information Tag amp Licensing a How to purchase Contains tools which will ease general administration of the GFI Network Server Monitor Support Center Knowledge Base GFI LANguard N S S GFI LANguard P S C GFI LANguard S E L M GFI Network Server Monitor General Contains various utilities and tools which will enable you to keep your GFI Network Server Monitor builds up to date and running You can access latest news sources and support at GFI as well as license your installation zi v 2005 All rights reserved GFI Software Ltd Screenshot 1 The GFI Network Server Monitor configuration The main GFI Network Server Monitor configuration display is divided into two windows e Tools Explorer window left view Contains nodes check folders and tools required for the configuration and running of GFI
16. If the Inherit alert parameters from the Parent folder option is selected see above screenshot unselect it and click on Settings in the Alerts area GFI Network Server Monitor Configuring GFI Network Server Monitor e 30 Settings Alerts Ea General Alerts a JV When the check fails Send an email to NSMAdministrators O Send a network message to NSMAdministrators O Send a SMS message to NSMAdministrators NOTE Double click on alert type to specify recipients Send failure alerts Only once after the failure C Once every fi minutes as long as the check continues failing JV When the check recovers from a failed state Send an email to NSMAdministrator O Send a network message to lt No Recipients Configured gt O Send a SMS message to lt No Recipients Confiqgured gt NOTE Double click on alert type to specify recipients Screenshot 25 Alerts setup dialog 3 Choose the event for which alerts must be sent e Select When the check fails option to send alerts whenever this check fails e Select When the check recovers from a failed state option to send alerts when the monitoring check recovers from a failed state 4 Select the type of alert to be sent e g click on the Send an email to option to send email alerts whenever this check fails Select users and groups xi Available users groups Selected users groups E NSMAdministrator NSM dministrato
17. Remove Run the above file Only once after the failure C Once every fi minutes as long as the check continues failing IV When the check recovers from a failed state c Emergency Start_Activity exe CHECK_TARGET Screenshot 27 Run External File setup dialog GFI Network Server Monitor can be set up to launch executables batch and or VBScript files whenever an important event occurs This action is configured as follows 1 Right click on the check to be configured and select Properties By default the check properties dialog will open in the General tab 2 Click on the Actions Tab If the Inherit run external file parameters from parent folder option is selected unselect it and click on Settings in the run external file area 3 Specify the event condition during which the external file will be run e Select When the check fails execute option to launch files whenever the check fails e Select When the check recovers option if you want to launch files when the monitoring check recovers from a failed state 4 Click on the respective Add button and specify the complete path to the file to be executed e g c Error_folder Capture_Error exe GFI Network Server Monitor Configuring GFI Network Server Monitor e 32 Settings Program Actions Specify file to execute General Specify the file to be executed The file can be either a VBS file or an
18. Specify the number of your provider s SMS service center SMSC This number is supplied by the SMS service provider e COM port Select the COM port where the GSM device i e phone modem is connected e Baud Rate Specify the speed at which the communication will take place Always specify the speed recommended by your SMSC provider e Initialization String Optional If required specify any AT Commands that you wish to send to your modem NOTE The initialization string is a set of modem AT commands combined into one string e g AT amp F amp C1 amp D2 For a complete list of AT commands visit http esvc001164 wic0O13u server web com modems modemstrings htm 4 In the Retries entry box specify the number of times that the In built GSM SMS Server will try to send an SMS alert should the first attempt fail 5 Click on OK to save your configuration settings GFI Network Server Monitor Global alerting options e 115 GFI FAXmaker SMS service provider template m PDA GFI Network Server Monitor Q SMS via GSM SN Template Email N Phone GFI FAXmaker Fax Server with connected GSM phone modem Si Recipient TabletPC with SMS Gateway X emplate Email GSM Cell phone with MS Gateway Smart or Satellite phone SMTP Mail Server Figure 3 SMS alert flow via GFl FAXmaker SMS service provider The GFI FAXmaker SMS Service allows GFI Network Server Monitor to send SMS messages th
19. 1 Select the check s right click on the selection and select Cut 2 Right click on the destination folder and select Paste Copy checks from to existing folders To copy checks from one folder to another 1 Select the check s right click on the selection and select Copy 2 Right click on the destination folder and select Paste GFI Network Server Monitor Configuring GFI Network Server Monitor e 40 Configuring monitor functions Introduction As soon as the new check wizard is triggered you must select the required monitor function from the extensive list of built in functions included in GFI Network Server Monitor This chapter explains how to configure each built in function as well as how to create custom monitor functions using VB Scripts GFI Network Server Monitor groups monitor functions according to their respective role Network Internet monitor functions This group contains functions that are used to monitor Network Internet protocols and services HTTP HTTPs function GFI Network Server Monitor can check for the availability of HTTP and HTTPs sites through specified ports GFI Network Server Monitor can be configured to go through a proxy server and to pass access credentials when authentication is required These credentials can be specified as part of the GFI Network Server Monitor Proxy Server parameters which are configured from the General Options node For more information on pr
20. Checks various types of DNS server records by retrieving record values and comparing them against specified values e ICMP ping function Checks a remote host for availability e Generic TCP IP port function Checks if a port availability and response e Email route function Checks that the email services are working properly by sending a test email through an SMTP server and verifying that it has been delivered to the destination mailbox GFI Network Server Monitor Introduction e 4 Built in checks for SNMP Simple Network Management Protocol e SNMP function Monitors specified variables on remote computers or devices via the SNMP GET message Built in checks for Linux Unix OS e Generic Secure Shell SSH check Allows you to create custom monitor functions which can be remotely executed on Unix Linux based computers through the Secure Shell SSH service running on that computer e File existence function Checks for the existence of a particular file on Linux Unix based computers e g results of scheduled batch jobs e CPU usage function Checks and restricts processor usage on Linux Unix based target computers e Directory size function Checks and restricts the size of a specified directory on Linux Unix based target computers e File size function Checks and restricts the size of a specified file on Linux Unix based target computers e Printer availability function Checks the status o
21. Eile must contain the following string not case sensitive wii gfi com G You can use the check_target tag in the file path Click fierg to load a sample lt Back Next gt Cancel Screenshot 20 File existence check parameters 1 Right click on the check to be configured and select Properties By default the check properties dialog will open in the General tab 2 Click on the Check Parameters Tab and specify the following parameters e File UNC Path The path to the file in UNC format e g machine monitor status txt that needs to be checked e Exists Enable the Exist option to specify that this check must find the specified file to be successful GFI Network Server Monitor Configuring GFI Network Server Monitor e 26 e File must contain Enable this option and specify the string that must be present in the file in order for the check to be successful e g transfer was successful 3 Click on Apply to accept the current configuration Define logon credentials The logon credentials are the logon authentication details which a monitoring check requires to connect to a target computer NOTE Computers running on Linux and Unix may require reference to a certificate authentication private key file instead of the logon password The certificate authentication file is often required by the SSH module for authentication by Linux Unix computers NO
22. Monitor 7 will store the status of the checks into The status of the checks can be stored in Microsoft Access MS Access does NOT need to be installed C Microsoft SOL Server 7 or higher MSDE Note For larger networks it is recommended that you use Microsoft SOL server 7 or higher or MSDE MSDE is provided for free on the Microsoft Office 2000 XP 2003 CD For more information please see the manual lt Back Cancel Screenshot 8 Select a database backend 9 Specify which database backend must be used to store the results of its monitoring operations You can choose between Microsoft Access Microsoft SQL Server 2000 or MSDE Click on Next to continue NOTE 1 MS Access database backend usage is recommended for small networks For medium and larger networks usage of Microsoft SQL Server 2000 as a database backend is recommended NOTE 2 MSDE can handle up to 2GB of data while Microsoft SQL server is capable of handling larger volumes of data efficiently and without limitations 10 If Microsoft SQL Server is selected as a database backend specify the IP or hostname on which the SQL server is installed as well as logon credentials You can use both SQL Server users as well as Windows NT authentication to access the database Click on Next to continue NOTE When using Windows NT authentication ensure that the GFI Network Server Monitor services are running under user accounts which can access the S
23. Server Support Center 4 Knowledge Base Start gathering information GFI LANguard N S S Getting the computers of afimalta GFI LANguard P S C Ready Found 69 computers GFI LANguard 5 E L M GFI Network Server Monit I Screenshot 147 Enumerate Computers Advanced tab options 5 Define additional information to be displayed by marking Determine Computer role on the network and or Determine whether computer is turned on NOTE Should it be required enter authentication details in the fields located at the bottom The list of constituent computers in the specified domain will be displayed Status details of the operation carried out is displayed in the bottom window E g To look for ALL computers which run on Windows 2003 OS ina domain called JASONTEST a Select enter domain name b Click on the General tab enable Only these option c Set to True the value near Windows 2003 in the Operating System selection area d Click on the Advanced Tab e Enable Enumerate from Active Directory as well as Determine computer role in network and Determine whether computer is on 6 Click on Retrieve to start enumerating computers Enumerate processes This tool is used to catalog processes running on a remote computer Amongst other tasks this tool searches and displays information on the CPU and Memory resources consumed by each
24. Server Monitor Configuring monitor functions e 68 CPU Usage NOTE This monitor function requires WMI to be installed on the computer running GFI Network Server Monitor as well as on the computer being monitored The monitor function will create a VBscript which uses WMI with the parameters you specify in the check parameters dialog WMI is only available on Windows 2000 and higher computers therefore this monitor function can only be used if both the GFI Network Server Monitor computer and the computer to be monitored are running Windows 2000 or higher GFI Network Server Monitor can check the processor usage status on Windows based target computers You can setup alerts and trigger other actions e g run an external file whenever the load of a specific processor exceeds the maximum usage allowed New Check CPU Usage Check global CPU usage on a target computer s SS Maximum global CPU usage allowed 50 Processor cPuo G Requires WMI on the monitoring and target computer s Click here to load a sample lt Back n gt Cancel Screenshot 62 CPU usage check parameters dialog A CPU Usage function requires the following parameters e Maximum global CPU usage allowed Specify the maximum CPU usage allowed on the target computer e Processor Specify which CPU will be checked CPUO is the default value for computers having one processor Directory Folder Size GFI Network Server Monito
25. The SNMP Simple Network Management Protocol GET message allows the Network Monitor Engine to request information about a specific variable on a remote computer or device Upon receiving a GET message the agent will issue GFI Network Server Monitor Engine a GET RESPONSE message containing either the information requested or an error indicating why the request cannot be processed An SNMP function requires the following parameters e Community String Specify the SNMP community string to be used by default public e OID Object ID Specify the Object ID This is a unique identification tag which could be either an alphanumeric name or the physical name long numeric tag used to distinguish each variable in SNMP messages e OID Data type Select the data type to be used from the available dropdown list The following are valid supported data types Bit Stream Counter Integer IP address Object Identifier Opaque String String Time Marks and Unsigned Integer e OID Data must be Specify an OID data value and select the operand to be used to compare the actual SNMP value against the lOD Data Value specified Supported operands include Equal To Not Equal To Less Than Less or Equal To Greater Than Greater or Equal To GFI Network Server Monitor Configuring monitor functions e 59 Windows OS generic checks Generic VB Script The VBscript function allows you to create custom checks using VBscripts F
26. The time when the alarm was triggered Check name CHECK_NAME The monitor check which triggered the alarm Target computer CHECK_TARGET The computer on which the event occurred Status CHECK_RESULT The current state of the monitor check which triggered the event E g Failed Explanation CHECK_EXPLANATION Details on the result of the executed check e Format Define the message format by selecting one of the following Plain text Send the email in plain text Rich text Send the email in HTML NOTE For more information on variables and message templates please refer to the Message Template section in this chapter Global settings for network alerts NOTE 1 GFI Network Server Monitor makes use of net send to send network alerts Make sure that you enable the Messenger service svchost exe k netsvcs on the computers which will send and receive network messages NOTE 2 Network alerts are configured from the user properties For more information on the configuration of network messaging please refer to the Configure user properties section in the Users and Groups chapter GFI Network Server Monitor Global alerting options e 111 Alerting Options Ea Email Network sms Specify the network settings to use when sending network alerts Specify the network message settings to use when sending net send alerts to the computers used by the admini
27. and checks text output for specific response e Process Properties function Checks the properties of processes running on target computers e g Memory CPU Handles e Event Log function Verifies if the specified Windows events occurred on target computer s e File existence function Checks for the existence of a particular file e g results of scheduled batch jobs e Disk space function Checks for available used disk space e Services function Checks if the specified Services are running on local or remote computer e CPU usage function Monitors and restricts processor usage e Directory size function Monitors and restricts the size of a specified directory e File size function Monitors and restricts the size of specified files e LDAP Query Checks the status of LDAP services on target computers e Physical Disk Condition function Checks the physical health of disk drives on windows based target computers e Disk drive function Monitors the physical status of specified disk drives e Printer availability function Checks for the status of printers connected to target computers GFI Network Server Monitor Introduction e 3 e Process running function Checks that processes are running on specified target computers e Users and Groups Membership function Monitors user groups against the presence of unauthorized users Built in checks for Windows applications e Ge
28. and information layout are identical to those of the Monitoring Check status feature in the configuration program For more information on how to navigate through the information on display refer to Viewing the state of checks from the GFI NSM configuration section in this chapter Mobile device view nternet Explorer a 5 25 xX j t Engine status Started Last update 1 12 2005 11 12 04 AM Presently failed monitoring checks TMUASON ICMP Ping Failed TRMUASON File Existence file cYasontot Failed Screenshot 100 Monitoring checks status view for mobile devices The Mobile device view displays information in a layout suitable for viewing on small displays Such displays are commonly found on small portable devices for instance mobile phones and PDAs To inspect your network status in Mobile device view open your Internet Explorer and type in the following URL http lt P address or computer name gt 11695 mobile html GFI Network Server Monitor Monitoring checks status e 104 In both normal and mobile device view the communication between the web browser i e Internet Explorer and the computer running GFI Network Server Monitor is carried out via port 11695 By default GFI Network Server Monitor includes a small footprint web server which can be set up from the configuration This avoids having to install and configure IIS to display your network status inform
29. click on the Alerting Options node and select Properties 2 Click on the SMS tab and from the SMS System dropdown select Generic SMS service provider template 3 Double click on the property which you want to configure e g SMTP server and specify the relative parameters in the Edit Property dialog NOTE When configuring properties always specify the details supplied to you by your SMS gateway provider The Generic SMS service requires the following parameters Global alerting options e 122 e SMTP server Specify the name of the SMTP server through which GFI Network Server Monitor will send the email to the SMS gateway e SMTP port Specify the SMTP port through which the transmission will take place By default this parameter is set to 25 i e default SMTP port e From Specify the account from where the email will be sent You can specify the email address configured in GFI Network Server Monitor for generic alerts e To Specify the email address of your SMS gateway provider i e the address where GFI Network Server Monitor will send emails for conversion to SMS This address is supplied by the SMS gateway provider and must be formatted as follows lt email gt lt emailtosmsprovider com gt E g sms messaging Clickatell com NOTE If you don t know the email address of your SMS Gateway ask your SMS gateway provider to provide this information e CC Optional paramete
30. continue NOTE After you have purchased the product there is no need to uninstall and reconfigure GFI Network Server Monitor because you can enter the new license key directly from the GFI Network Server Monitor configuration program For more information please refer to the Entering your License key after installation section in this chapter GFI Network Server Monitor Installing GFI Network Server Monitor e 12 fg GFI Network Server Monitor 7 Setup User Account Information Please enter requested data The GFIN S M 7 engine service runs the monitoring checks against the target computers By default checks which require logging in to the target computer will use the security context of the account under which the engine service is running It is recommended to run the attendant engine service under a domain administrator account Set up GFI N 5 M 7 engine service to run under The local system account A domain administrative account Account GFIMALTASjason Password E Confirm Password m NOTE Specify the user name in the format DOMAIN USERNAME lt Back Cancel Screenshot 6 Service Account details 7 Specify a service account for GFI Network Server Monitor NOTE The GFI Network Server Monitor service must run with administrator credentials It is recommended to provide a Domain Admin or Enterprise Admin account because GFI Network Server Monitor will most likely need administrative rights
31. dialog WMI is only available on Windows 2000 and higher computers therefore this monitor function can only be used if both the GFI Network Server Monitor computer and the computer to be monitored are running Windows 2000 or higher GFI Network Server Monitor can check for processes running on local and or remote computers If a process is active then the target computer is considered to be available GFI Network Server Monitor Configuring monitor functions e 74 New Check Process Running Check that a process is running on a target computers Check that the following process is running explorer exe include process extension e g explorer exe WARNING This check is based on a script which requires WMI to be installed on both this computer and the target computer Click here to load a sample lt Back n gt Cancel Screenshot 68 Running Process check parameters dialog A Process monitor rule requires the following parameter e Process Specify the module name of the process which needs to be monitored For instance alerter exe or explorer exe Users and Group membership NOTE This monitor function requires WMI to be installed on the computer running GFI Network Server Monitor as well as on the computer being monitored The monitor function will create a VBscript which uses WMI with the parameters you specify in the check parameters dialog WMI is only available on Windows 2000 and hi
32. e 64 New Check EventLog Check if a specified Windows event was generated on a target computer s Query the following event log Application v This check will fail when an event with the below properties fis found Event ID fe4a 612 Event type Information P Warming I Eror JV Success audit IV Failure audit Event source Be Event category Bo User I Description contains string So Rj JV Check only events which happened in the last feo minutes You can specify several event IDs separated by comas e g 576 640 Use the character to match any criteria Click ferg to load a sample lt Back Next gt Cancel Screenshot 57 Event log check parameters dialog It can also look for specific patterns in the description of an event as well as notify the system administrator if one of the events occurred within a specific period of time e g You can check if a message from your antivirus software has been posted in the Application Event Log during the last 30 minutes An Event Log function requires the following parameters e Query the following event Log Select the log File to be checked from the dropdown list Available logs include Application Security System or server related log like DNS Exchange etc e This check will fail when Specify whether this check will fail when an event having the specified properties is found or vice versa e Eve
33. equal to Running or Power Save then GFI Network Server Monitor will consider this printer as being down You can configure this function to send alerts to the recipients concerned whenever a printer is down NOTE To run this check you must configure the printers to be monitored as network printers on the target computer GFI Network Server Monitor Configuring monitor functions e 73 New Check Printer Availability Check the status of a printer connected to a target computer s Printer Display Name as displayed on the target computers no UNC HP_5P_TMJASON Gi Inthe Printer Display name field use the printer display name as defined on the remote computer s for instance HP LaserJet 5L WARNING This check is based on a script which requires WMI to be installed on both this computer and the target computer lt Back n gt Cancel Screenshot 67 Printer availability check parameters dialog The Printer Availability rule requires the following parameter e Printer name Specify the name of the network printer to be monitored NOTE Specify the same printer name used on the network e g HP4P_onJMPC Process Running NOTE This monitor function requires WMI to be installed on the computer running GFI Network Server Monitor as well as on the computer being monitored The monitor function will create a VBscript which uses WMI with the parameters you specify in the check parameters
34. executable file such as BAT and EXE files File to execute Jc Emergency Stop_Activity exe a Parameters to pass to the file ZCHECK_TARGET G System variables like CHECK_NAME and CHECK_TARGET are supported Please refer to the manual for all of the supported variables Screenshot 28 File parameters dialog If the file requires any parameters you can still pass them on the command line You can also pass such parameters through GFI Network Server Monitor by specifying them in the Parameters to pass to the file field You can pass parameters in plain text as well as through variables like lt Date gt and lt CHECK_RESULT gt These variables are then substituted to values when the program or script is launched For further information on variables please refer to the Message Templates section in the Global Alerting options chapter 5 Click on OK to add this entry to the list of files to be launched NOTE Select the Once every minutes as long as the check continues failing option ONLY if this file is to be launched more than once during the time that this check is in a failed state In this case specify the time interval in minutes required between the consecutive execution of the files e g To run a file every 5 minutes select this option and enter 5 in the time interval so that it reads Once every 5 minutes as long as the check continues failing 6 Click on
35. included in this report specify the length of time a server or service was in a particular state making it easy to define the relative up down time To generate an Availability Detail Report 1 Go on Start gt GFI Network Server Monitor 7 program group gt GFI N S M 7 Reporter This launches the Reports Wizard Click on Next to start creating the report GFI Network Server Monitor Reports Wizard Report Type Select which type of report to generate Select the type of report to generate This report type will contain all status changes including a description for each status change of all selected checks between the specified time frame Availability Summary report This report type contains percentages of all status types for all selected checks between the specified time frame lt Back Cancel Help Screenshot 139 Specify report interval GFI Network Server Monitor Reporting e 155 2 Select the Availability Detail Report option and click on Next to continue GFI Network Server Monitor Reports Wizard From To Dates Select the monitoring period to include in the report Report events which happened in the period From Jor October 2005 To 14 October 2005 X omei eo Screenshot 140 Select the period to be covered by report 3 Specify the monitoring period From and To date to be covered by the report GFI Network Server Monitor Reports Wizard
36. maintenance schedules These schedules are set up to avoid receiving a flood of alerts when target computers codependent servers and or respective services are undergoing maintenance e g during hardware software upgrades and data backups GFI Network Server Monitor Configuring GFI Network Server Monitor e 36 Properties TMJASON File Existence file Y oNSMINSTALLDIR o Order txt Ea General Check Parameters Logon credentials Actions Dependencies Maintenance Target Maintenance and Operational Times J Inherit maintenance times parameters from parent folder Indicate the operational times for the computer which is being monitored by this check hd bal Bad Bead Haaa viviviviviviviviviviviviviviviviviviviviv viviviviviviviviviviviviviviviviviviviviv FARA RA A A RA RA RA PA PA PA PA PA PA PA PA PA PA PA PA PA BEKKEMA A A A AA a a R A A a a iaae aa viviviviviviviviviviviviviviviviviviviviv NOTE Marked time intervals are considered operational times Unmarked intervals are considered as times when the computer is switched off or under maintenance Cancel Apply Screenshot 32 Maintenance schedule Dialog To set up maintenance schedules 1 Right click on the check to be configured and select Properties By default the check properties dialog will open in the General tab 2 Click on the Maintenance Tab If the Inherit maintenance times para
37. orowe EE mont r B Groups a mib 2 Alerting Options experimental Es General Options ca Private 4 Database Maintenance Options security Hy snmp 2 a Tools Enumerate Computers Enumerate Processes Ze DNS Lookup Zg Whois Traceroute Ze SNMP Audit Ze SNMP Walk E GO General Screenshot 154 SNMP Walk Setup window NOTE In most cases SNMP should be blocked at the router firewall so that Internet users cannot SNMP scan your network It is possible to provide alternative community strings 1 Specify the following parameters e IP address Enter the IP address of a computer or device which you wish to scan walk e Community String can be left as default Define if the default Community string public or an alternative community string is to be used Should it be required key other alternative community strings 2 Click on Retrieve to start SNMP scan GFI Network Server Monitor Network tools e 168 Other features Export configurations You can export a copy of your GFI Network Server Monitor configuration settings including checks folders alert settings users groups and general parameters to a specified XML file This function can be used to backup your current configuration settings or to use the same configuration settings on another computer running GFI Network Server Monitor e g to avoid reconfiguration when changing the computer on which GFI Network Server Monitor is
38. plain text file containing one computer name per line 6 Click on Finish A default set of folders one per target computer containing the checks for that target computer will be created Creating monitor checks To generate a new check use the Create New Monitoring Check Wizard This wizard asks you for e The type of check to create e The properties relevant for that type of check e The target s to run the monitoring check against Example Creating an ICMP Ping check GFI Network Server Monitor Configuring GFI Network Server Monitor e 19 GFI Network Server Monitor 1 Right click on the Monitoring Checks Configuration node in the Tools Explorer left window and go on New gt Monitoring Check New Check Create new monitoring check Select which type of monitoring check you want to create Select which type of monitoring check do you want to make Check Type DNetwork Intemet protocols and servi E HTTP HTTPs Check the availability of HTTP and HTTPs E FTP Check the availability of FTP sites IMAP Mailserver Check the availability of an IMAP server by E NNTP Newsserver Check NNTP news servers by establishing E POP3 Mailserver Check that the POP3 Server is running on t E SMTP Mailserver Checks that the SMTP server running on t E NTP Timeserver Check the availability of NTP time servers DNS Server Check DNS Server entries on a target com Ping Check av
39. port port 21 Click here to load a sample lt Back n gt Cancel Screenshot 37 FTP check parameters dialog GFI Network Server Monitor can be configured to go through a proxy server as well as to pass access credentials to the specified FTP site should authentication be required An FTP monitor function requires the following parameters e URL ftp s Specify the location of the ftp site in URL format i e ftp server port path format e Use FTP site authentication Enable this flag when logon credentials are required to access the specified FTP site e Use Proxy server Enable this flag if the specified FTP site is to be accessed through a Proxy server IMAP Mailserver check GFI Network Server Monitor can check the availability of IMAP mail servers The IMAP Mailserver check initiates a handshake connection to the remote IMAP port and through the replies received it can verify if the remote server s IMAP protocol is working properly This check can also be configured to physically log on to a specific mailbox and check for the number of emails present in a folder within the accessed mailbox This will verify that the IMAP service is indeed running GFI Network Server Monitor Configuring monitor functions e 43 accessible and delivering the service required to the end users The IMAP check also supports logon to the IMAP mailbox using SSL Through SSL you can secure the transmission session
40. process found GFI Network Server Monitor Network tools e 161 running on the specified target computer You can also highlight a particular process or indicate processes which are consuming more than a defined percentage of CPU usage The set up window layout is similar to the enumerate computer s tool were the resulting list of processes is displayed in the top middle window whilst the status details of the operation carried out are displayed in the bottom middle window Icons on the left of each process indicate the state of the process in relation to the specified CPU usage value amp Indicates that the process is using more than the specified CPU usage limit Indicates that the process is using less CPU resources than the specified limit GFI Network Server Monitor 7 0 of x File Tools Help e Tools Explorer a GFI Network Server Monitor Get the processes running on the Hostname P jason paii ene Monitoring Checks Configuratic Name PID CPU Usage _ Physical Mem Physical _ Vitual Mem a Options a m ABC LTD wmiprvse 2436 0 1 85 Mb 0 36 3 94 Mb General Advanced if Me nsmrepit 502 0 6 68 Mb 1 3 8 85Mb AoD mspaint 3320 0 20 23Mb 395 30 11 Mb aeea th lal elon Prei eni ae i en rae on a ee ee cere Program Configurati ioe i ighi i B amp ie Sati fous OUTLOOK 4384 0 12 71 Mb 2 48 1213 Mb Aireen Ai nsmui
41. server Enable this flag to indicate that no authentication is required on the web server e Allow only the following users to log on to the web server Enable this flag to grant web server access only to the specified users e To specify users that have access to the web server click on Add Then specify the user s authentication details User name and Password and click on OK Configuring IIS as the web server Using IIS as the web server gives you more advanced authentication features and the possibility to secure the connection via SSL The integration with IIS is very straightforward GFI Network Server Monitor updates an XML file from which the 2 views are rendered These files are stored in the GFI Network Server Monitor Server web folder You need to create a virtual directory in IIS which points to the GFI Network Server Monitor Server Web folder To do this GFI Network Server Monitor General options e 135 1 Start up Internet Services Manager right click on the Web Site node and from the popup menu select New Virtual Directory irtual Directory Creation Wizard xi Virtual Directory Alias You must give the virtual directory a short name or alias for quick reference Type the alias you want to use to gain access to this Web virtual directory Use the same naming conventions that you would for naming a directory Alias nsmremotemonitoy lt Back Cancel Scree
42. source name e g MY_Dbase and select the database you wish to monitor In this example we have used the Northwind database Click on OK to add the data source New Check ODBC Use ODBC to check for availability of a database SS This check tries to make a connection to a database configured as a Data source in the ODBC Data Source Administrator on the local computer ODBC DSN name Jinitodbc G The target computer field for this check is not utilized The check is performed on the server running NSM The check will query the DSN entries on the local machine DSNs can then point to any remote database as well as contain login and password credentials inside the DSN itself Login and password fields are optional ODBC Data Source Administrator can be accessed from Start gt Settings gt Control Panel gt Administrative Tools gt Data Sources ODBC Click here to load a sample lt Back n gt Cancel Screenshot 75 Generic ODBC properties The ODBC check requires the following parameter e ODBC DSN name Specify the ODBC data source name e g Northwind Terminal Services checks Terminal Services Port Check GFI Network Server Monitor can check if Local or Remote servers have their terminal services port enabled This is done by establishing a handshake connection on the remote TCP port by default port 3389 of the target computer GFI Network Server Monitor Configuring moni
43. the string specified below j eply Click here to load a sample lt Back n Cancel Screenshot 55 Command Line Output check parameters dialog The parameters required for this function are e Run the file at location Specify the complete path to the command line tool file which must be executed e 9 C Windows System32 Ping exe e With the following parameters Specify additional parameters required by the specified tool e g the IP address name of host to which the ping will be sent e Contains the following text Enable this flag and specify the string to be searched in the command line output If a matching string is found the check will be classified as successful e Does not contain the following string Enable this flag and specify the string to be searched for in the command line output In this case if no matching string is found the check is classified as successful Process Properties Memory CPU Handles etc This function checks for properties related to a process running on specified target computers Such checks include processor usage user time consumed privileged time consumed number of handles number of threads physical memory and virtual memory in use by application GFI Network Server Monitor Configuring monitor functions e 63 New Check Process Properties Memory CPU Handles etc Checks properties related to a running process on the target comput
44. to access the servers on your domain However it is not mandatory to provide a Domain Enterprise Admin account for every monitoring check since separate credentials can be provided or inherited fe GFI Network Server Monitor 7 Setup Mm E Mail Settings Enter administrator email and SMTP mail server settings Please enter the details of the SMTP server and email adress that are to be used by GFI Network Server Monitor 7 for email notification Erom NSM 127 0 0 1 To administrator localhast SMTP server fi 27 0 0 1 Port 125 SMTP server does not require authentication SMTP server requires authentication SMTP User SMTP Password Verify Mail Settings caret Screenshot 7 Mail Server details GFI Network Server Monitor Installing GFI Network Server Monitor e 13 NOTE The following stage is only required during a new clean installation 8 Specify the SMTP mail server details Hostname IP and Port as well as the email address where generic alerts will be sent Click on Next to continue NOTE 1 You can define separate email alert addresses for each check from the check properties during configuration NOTE 2 You can verify your settings by sending a test message Do this by clicking on Verify Mail Settings ie GFI Network Server Monitor 7 Setup Se Eg Installation Type Choose the installation type that best suits your needs Choose a database in which GFI Network Server
45. which will be used when sending emails from the specified SMTP server e g nsmadmin gfi com NOTE All alerts generated by GFI Network Server Monitor will be sent via the specified email account e Sender Display Name Specify a display name for the Sender s email account NOTE To test this configuration click on Send a test message This function makes use of the specified mail server parameters to send a test email to the specified email address 3 Click on OK to close the mail server properties dialog 4 To change the priority of the configured mail server click on Move Up or Move Down GFI Network Server Monitor Global alerting options e 109 5 Click on OK to save these settings and exit the Email Alerts configuration dialog Edit existing mail server details To change configured mail server details 1 Right click on the Alerting Options node and select Properties The alerting properties will open by default in the Email Alerts configuration dialog i e Email tab 2 Click on Edit and make the required configuration changes For more details on mail server configuration refer to the Adding a mail server section in this chapter Formatting the email message The alert message can contain manually inputted text e g Alert by NSM text from system variables e g CHECK_RESULT or a combination of both e g Alert Message from CHECK_NAME check
46. 0 0 0 2 Mb 0 04 1 46 Mb Ide 0 70 01 0 02 Mb 0 0 Mb A wmplayer 3560 14 09 27 93 Mb 5 45 42 Mb 7 4 gt Screenshot 149 List of Highlighted Processes DNS lookup This tool helps resolving domain names to their corresponding IP address During the DNS lookup process this tool also enumerates additional information such as Aliases MX and NS Records GFI Network Server Monitor Network tools e 163 FS GFI Network Server Monitor 7 0 ol x Fie Tools Help e gt mlm Tools Explorer GFI Network Server Monitor B Monitoring Checks Configuratic ABC LTD TMJASON Gy DEF LTD xzLTD Monitoring Checks Status a B Program Configuration Se Users and Groups Hostname IP to resolve TMJason x Retrieve General JV Basic information Resolving host jason Performing DNS Lookup operation through DNS Server 130 16 130 15 Retrieve the Following Information Please wait Host information Basic information results I Aliases Q Users 2 Groups A 130 16 130 68 TMJason IV MX Records S Alerting Options Host information results IZ NS Records Es General Options amp Database Maintenance Op B Tools Ze Enumerate Computers Zg Enumerate Processes INo HINFO Records found DNS Servers to query Aliases results No CNAME Records found Use default DNS server C Use alternative DNS server s MX Records results No MX Records found Z
47. 130 Database Options Through the Database Maintenance Options node you can select and configure the database backend to use for the storing of monitoring results data You can choose between MS Access and MS SQL Server as a database backend In the case of SQL Server you can also specify the type of authentication to use when logging onto the database SQL Server authentication or Windows authentication Windows NT authentication mode allows you to log onto the SQL Server database using your Windows account details The SQL Server authentication mode allows you to log on to the database using the SQL Server account details i e the credentials stored in ACL tables of SQL Server For more information on the authentication modes supported by SQL Servers visit http Avww windowsecurity com articles SQL Server 2000 Authentica tion html NOTE Support for SQL Server database backend is only available during evaluation and in the Consultants Enterprise editions of GFI Network Server Monitor Configuring the database backend To configure the database backend used by GFI Network Server Monitor right click on the Database Maintenance Options node and select Properties GFI Network Server Monitor Database maintenance options e 145 MS Access database backend Database Options fe 9 C Program Files GFI Network Server Monitor 75D Screenshot 131 Ms Access backend properties dialog To use an
48. 1624 13 45 38 62 Mb 7 54 43 81 Mb 5 a zcru Q Users a D Groups alg 2424 0 0 14Mb 0 03 1 06Mb S Alerting Options cisve 1532 0 0 33 Mb 0 06 4 15Mb ml Setmmesne certo General Options javaw 18 0 6 12Mb 1 2 19 38 Mb amp Database Maintenance Op cstss 640 0 1 56 Mb 0 31 1 92 Mb I Refresh list once every 5 a seconds BBE Tools nsmwebsv 5538 0 0 83Mb 0 16 7 69 Mb Ze Enumerate Computers KWSProd 4020 0 2Mb 0 39 3 72Mb Z Enumerate Processes wuaucltl 368 0 0 55Mb 0 11 4 36 Mb T Connect to host using credentials Z DNS Lookup Isass 70 0 251 Mb 0 49 3 96 Mb i e x wra f PureText 23588 0 0 21 Mb 0 04 0 52Mb ele traceroute f f svchost 184 0 0 09Mb 0 02 2 32 Mb Passwort OS S sine ae nsm_attendant 4188 0 2 43 Mb 0 49 12 41 Mb ao paai 2 System 4 0 0 04 Mb 0 01 OMb watmar 20 0 0 2Mb 0 04 1 45 Mb G3 Version Information n as B Licensing Alde o 70 0 0 02Mb 0 OMb How to puchase A wmplayer 3560 14 09 27 93Mb 545 42Mb 7 Support Center Knowledge Base Connecting to host jason GFI LANguard N S S Connection successfully established GFI LANguard S C Gathering list of running processes GFI LaNguerd SELM Please wait a few seconds while calculating CPU usage values a guar Formatting process details GFI Network Server Monit Displaying process list 4 P Total Processes 58 zi Screenshot 148 Enumerate Processes setup window General Tab This tool requi
49. 42 Choose the report format required 5 Specify the format type and output file name of the report Select CSV or XML formats if you want to further process the report and perform more advanced calculations using another external program such as Microsoft Excel Click on Next to continue 6 At the final stage a dialog will inform you that the report wizard is ready to start generating the report If you want to modify any of the previously configured settings click on Back Otherwise click on Next to finalize the report GFI Network Server Monitor Reporting e 157 E GFI Network Server Monitor Detailed Report Microsoft Internet Explorer Oo x File Edit View Favorites Tools Help ay E Q x B T J search Se Favorites fA Cy ee w 2 Address fe C Program Files GFI Network Server Monitor 6 5 Reporter nsm_report_200581172940 htm ind Go Links Se Snagit J B GFi SECURITY amp MESSAGING SOFTWARE GFiWERServerMonitor Availability Report Detailed From 01 08 2005 to 01 08 2005 ANDREM Disk Space C drive Status From To Duration Reason a 0108 2005 01 08 2005 aa Queued 00 00 00 09 18 48 Shes Im gt 01 08 2005 01 08 2005 1 Disabled 09 18 48 17 29 48 8 hrs 11 min On Hold ANDREM Event Log Service Status From To Duration Reason a 01 08 2005 01 08 2005 m WwW Queued 00 00 00 09 18 48 9 hrs 19 min Disabled Cx DAR a oi eee
50. 5 Monitoring Checks Status E g8 Program Configuration NSM Users and Groups B Groups erting Options Screenshot 133 Users and Groups folders Users Add a new user 1 Right click on the Users folder under the Users and Groups node and go on New gt User 2 Specify the parameters required in the user properties as described below GFI Network Server Monitor Users and Groups e 149 Configure user properties User parameters are defined in the user properties dialog which opens automatically whenever a new user is being added or can be opened when necessary by right clicking on an existing user and selecting Properties NSMAdministrator Properties xi General working hours Alerts Member or Ls Specify the general details for this user as well as the Parameters to use for the various notification methods when important events happen Full name NSMAdministrator Description NSM default administrator Specify the alerting parameters to use for this user Email nsmadmin afi com Mobile Number 994420000 Network Messages ISAServer Add TMJason Remove G Multiple emails can be specified by using as separator Network message notifications are sent to the computers specified in the list Cancel Apply Screenshot 134 User Properties dialog Configure user s general parameters These parameters define the general details of the user includ
51. 58 SQL 2 state indicators 105 System requirements 9 T TCP 4 44 45 46 48 52 Terminal Services checks 81 82 83 U uncertain result 106 133 UNIX 1 Users and Groups 4 5 32 76 91 111 149 153 154 Users and Groups Membership function 4 5 V VBScript 5 60 173 174 Ww Windows applications checks 76 Windows operating system checks 64 Windows OS databases checks 79 Windows OS generic checks 60 WMI 6 64 176 working hours 1 2 149 150 151 152 X XML 6 155 180 elndex GFI Network Server Monitor
52. 7 c Yes want to remove GFI Network Server Monitor version 5 5 prior to installing version F No l do not want to remove version 5 5 prior to installing version 7 Screenshot 2 Previous Version Detected 3 The Installation Wizard starts by checking if you have previous versions of GFI Network Server Monitor installed on your computer Specify if you want to keep any previous installation detected or instruct the wizard to uninstall it for you fg GFI Network Server Monitor 7 Setup Mm E Check for latest build availability Check for a newer version of GFI Network Server Monitor F This installation can check whether there is a newer build for GFI L Nguard N S M 7 downloadable from the GFI web site This procedure will require an internet connection in order to connect to the GFI web site Yes please check for a newer version of GFI N S M 7 on the GFI web site No thank you do not check for a newer version and continue with the current installation Cancel Screenshot 3 Check for latest build GFI Network Server Monitor Installing GFI Network Server Monitor e 10 4 Choose whether you want the installation wizard to look for a newer version of GFI Network Server Monitor on the GFI website or click Next to continue with the current installation In the license dialog read the licensing agreement carefully Mark I Accept the Licensing agreement and click on Next to continue f
53. 9 usually port 119 J Send command when connected IV Response must include the following string not case sensitive 200 Timeout 7o00 milliseconds G Inthe Port field enter a valid TCP port number The default Timeout value is suitable for most connections Change the timeout value for servers that have slow response time Click fer to load a sample lt Back Next gt Cancel Screenshot 39 NNTP Server check parameters dialog An NNTP news server availability function requires the following parameters e Port Specify the TCP port number to be used when connecting to NNTP news server NNTP Default port is 119 e Send command when connected Enable this flag to send a specified command as soon as the connection is established e Response must include the following string Enable this flag in order to check if the response message contains a specified string NOTE Normally a response from NNTP servers includes 200 in its string GFI Network Server Monitor Configuring monitor functions e 45 e Timeout Specify the number of milliseconds before the function will timeout Usually a connection to the server will be established within 1 second However some slow busy servers need more time Default value is set to 7000 milliseconds POPS Mailserver check GFI Network Server Monitor can check the availability of POP3 mail servers The POP3 Mailserver check initiat
54. A 26 07 2005 17 04 08 Warning ANDREM GFI L4Nguard N S M 6 0 attendant service Unable to query service state service GFI NS A 26 07 2005 17 04 08 Warning ANDREM GFI L4Nguard P S C 2 0 attendant service Unable to query service state service GFI LAI x 26 07 2005 17 04 08 Error ISASERVER DNS Server query www google com result 209 217 53 213 DNS server was queried re 26 07 2005 17 04 08 Information RODION1 ICMP Ping Reply from RODION time Oms amp 26 07 2005 17 04 08 Warning ANDREM GFI LANguard N S S 6 0 attendant service Unable to query service state service GFI LA A 26 07 2005 17 04 08 Warning ANDREM GFI LA4Nguard S E L M 5 0 Collector agent service Unable to query service state service A 26 07 2005 17 04 08 Warning ANDREM GFI LANguard E L M 5 0 Archiver agent service Unable to query service state service amp 26 07 2005 17 04 08 Warning ANDREM GFI LANguard S E L M 5 0 Alerter agent service Unable to query service state service GF amp 26 07 2005 17 04 08 Warning ANDREM Microsoft Exchange Information Store 1 Unable to query service state service MSExchar 26 07 2005 17 04 08 Warning ANDREM Microsoft Exchange Information Store Unable to query service state sevice MSE chara gt Screenshot 97 Engine Status tab The GFI N S M Activity Monitor opens up by default in the Engine Status tab This tab displays all the information r
55. Authentication Digest and Integrated Windows Authentication Integrated Windows Authentication is the preferred choice in an Active Directory environment because it makes the authentication process seamless since initially it does not prompt users for their user name or password information It uses the current Windows user information on the client computer for authentication instead If you are installing GFI Network Server Monitor on a DMZ you must use Basic authentication The following steps show how to secure access to the Web based remote monitor 1 Open up Internet Services Manager Right click on the Network Server Monitor Remote Monitor virtual directory under your server web site and select Properties 2 Under the Virtual Directory tab make sure to deselect Directory Browsing GFI Network Server Monitor General options e 138 nsmremotemonitor Properties iv index html p E BIGWSE Screenshot 125 Specify default document 3 Select the Documents tab and remove all the default documents Add the following default document index html 4 Select the Directory Security tab and click on Edit for the Anonymous access and authentication control group 5 Select Integrated Windows authentication recommended if installed on the internal network OR Basic Authentication check box if installed in the DMZ Ensure Anonymous access is deselected GFI Network Server Monitor General optio
56. Checks Select which checks to include in the report Select the set of checks that will be included in the report C Allchecks The following checks CO HTTP HTTPS www gficom HTTP HTTPs Ms TMJASON File Existence file NSMINSTALLDI File Existence Ms TMJASON ICMP Ping can ping ICMP Ping Screenshot 141 Specify which checks to include in the report 4 Specify the checks that you wish to include in your report Select the All Checks option to include the data of all existing checks Alternatively you can select The following checks option and choose GFI Network Server Monitor Reporting e 156 the checks which you wish to include in the report When ready click on Next to continue NOTE By default checks are listed in their respective folders To display only the list of currently configured checks i e without folders select the Display all configured checks in a list option GFI Network Server Monitor Reports Wizard Output Specify the format type and output filename qraveeesesen J Render the output XML file using the following XSL file c program files gfi network server monitor reporter Detaile Browse HTML C csv Use the following tab delimiter Save the report to the following location full path including filename Je program files qfi network server monitor 7 reporter nsm_report_20 Browse coct_ Hee Screenshot 1
57. Checks properties related to an operating system object on the target computer s to determine the performance of an application Performance object NET CLR Data as Performance counter E Bytes in all Heaps Instance name _Global_ Value must be Greater Than fi oo lt Back __New gt Cancel Screenshot 53 OS Object Performance Counter check parameters dialog GFI Network Server Monitor Configuring monitor functions e 61 The parameters required for this function are Performance Object Click on the button to display the list of available objects Performance Counter Selection xi Show Performance counters applicable to the local computer another computer 7 Refresh Counters Performance object NET CLR Memory Performance counter Performance instance Bytes in all Heaps GC Handles nsm_attendant Gen 0 Collections nsmui Gen 1 Collections NSMwebsry Gen 2 Collections Induced GC of Pinned Objects of Sink Blocks in use x Selected Performance Counter Description This counter is the sum of four other counters Gen 0 Heap Size Gen 1 Heap Size Gen 2 Heap Size and the Large Object Heap Size This counter indicates the current memory allocated in bytes on the GC Heaps Cancel Screenshot 54 Performance Counter Object Selection Dialog 1 Specify the target computer containing the object performance counters that nee
58. Domain Services Checks Alerting Options iW5kServerMonitor General Options Sisus Check Name Date Time More Information 4 Database Maintenance Of This folder contains no monitoring checks 2 Tools T Zg Enumerate Processes Hardware Checks Zg DNS Lookup L Stistus Check Name Date Time More Information Ze Whois k Ke Traceroute Q Disabled JASON Disk Space C drive 7 28 2005 Sa gt on Hold Ze SNMP Audit Ze SNMP Walk Disabled Jason Print Spooler 7 26 2005 ae On Hold General ee Version Information Q Disable 1850 Print Server Important 7 95 on95 pega On Hold 6 L Failed Events Event Log PM 3 Licensing How to purchase Q Disabled Jason ICMP Ping 7 26 2005 ee On Hold Support Center Knowledge Base GFI LANguard NS S 8 Fi 2 a L Sistus Check Name Date Time More Information GFI Network Server Monit Q Disabled Jason IS Admin Service 7262008 ha S on Hold DIR 3 E 4 Screenshot 95 All checks page To view the status of all checks in GFI Network Server Monitor click on the Status All checks link located at the top of the Status Monitor home page This will display a list of all the checks grouped under their respective folder GP jason E os and Services Checks o Domain Services Checks Screenshot 96 Nested Folders You can expand or collapse the contents of a folder by clicking on or respectively TIP Although the view
59. Enterprise e Windows Vista Enterprise Business Ultimate e Windows XP Professional SBS 2008 e SBS 2003 Other components e Internet Explorer 5 5 SP2 or later e NET framework 1 1 e MDAC 2 6 Target computer components e WMI included in Windows 2000 or higher WMI must be enabled e Windows Scripting Host 5 5 or higher required only if there are configured checks that are using VB Script Windows Scripting Host is included in Internet Explorer 5 5 SP2 or higher Hardware e CPU 2GHZ e RAM minimum recommended 512 MB 1 GB e Hard Disk space 100 Mb Installation procedure The installation wizard installs the actual monitor service the configuration module and all the required application files automatically To start an installation 1 Exit all Windows Programs and log on as Administrator GFI Network Server Monitor Installing GFI Network Server Monitor e 9 2 Launch the GFI Network Server Monitor installation wizard by double clicking on NetworkServerMonitor7 exe As soon as the welcome dialog is displayed click on Next to start the installation fg GFI Network Server Monitor 7 0 Setup GFI Network Server Monitor version 5 5 detected Please choose if you want to remove NSM 5 5 Setup has detected that GFI Network Server Monitor version 5 5 is installed Do you want to remove GFI Network Server Monitor version 5 5 prior to installing GFI Network Server Monitor version
60. H Windows XP Workstation General Advanced Pra z ETO B ANDREIDEV 4208C Windows XP Workstation TN fa XYZ LTD i ANDREIZ Windows XP Workstation ETARE q B ANDREWZ Windows XP Workstation Specify how you want to enumerate the list Monitoring Checks Status of computers be SI AUTORESPONDER Windows XP Workstation 2 8 Program Configuration e NA a A indows orkstation 3 ll Users arc Groupe al anBaRA wi xP Work Enumerate from Active Directory Q Users Al Windows Workstation JT Determine computer role in network D Groups icciv Windows XP Workstation recuited for nor 0S type fiters S Alerting Options gA CHRISY Windows XP Workstation 3 3 S General Options gf DAvIDV Windows XP Workstation T Daten whether computer ie tumed ory S Database Maintenance Op S DENNISM Windows XP Workstation C Enumerate using Windows Explorer Interface Tools S EDWARD Windows XP Workstation UEA Enumerate Computers EMMANUELG DEV Windows XP Workstation Zg Enumerate Processes A EMMANUELG DEV2 Windows server 2003 Server User Name fiason z Heid Lookup B FAXSRV Windows server 2003 Server Password mme i oe B FILESERVER Windows server 2003 Server z 1ircenias S FSERVER Windows 2000 server Workstation udi 4 B GFILAPTOP Windows XP Workstation b gt oe QHP 2100 Windows 95 98 ME Workstation Version Information S HP LASERJET 5 Windows 95 98 ME Workstation Licensing BI ISA2K4 Windows server 2003 Server How to purchase SA ISASERVER Windows server 2003
61. ION Unable to determine Function i retvalUnknown Else If condition Then EXPLANATION Yes it is true because Function i True Else EXPLANATION No it s not true because Function i False End If End If End Function where Function_i is an arbitrary name for the function You can save this function in either one of the standard VBS files i e ads vbs exchange vbs hardware vbs os vbs or sample vbs or in a new VBScript file In case of a new file ensure that your VBS file is accessible via the GFI Network Server Monitor Share Adding a monitor function written in VBscript After you have written a monitor function in VBscript you must add it in the Network Server Monitor Manager as a check To do this 1 Right Click on Monitoring Checks Configuration and go on New gt Monitoring Check GFI Network Server Monitor Writing your own monitoring functions e 174 New Check VBScript Use your own function in Bscript as a monitoring check Script location c Program Files GFI Network Server Monitor 6 0 Script e VB Function to execute GetCpull sage VB Function parameters Double click on the parameter line to specify a value for it Parameter Value Description al 1 CHECK_TAR Pass on Target Computer Name 2 CPUO Pass on CPU number Usage Threshold value Edit script G IMPORTANT String parameter values must be enclo
62. List of available folders a G lt Root folder Create new folder NOTE The check you selected to be created is not computer based Does not require a target computer to be specified lt Back n gt Cancel Screenshot 18 The Select Target folder dialog NOTE Refer to Configuring Monitor Functions chapter for more information on the type of checks supported by GFI Network Server Monitor Configure monitor check properties About monitor check properties Monitoring checks require parameters which define their performance E g the Scan Frequency defines the time interval between consecutive runs of a monitoring check These parameters also pre define the actions that GFI Network Server Monitor must trigger when a check succeeds or fails e g Alert parameters designate the type of alert to be sent including its recipient s Parameters can be directly configured from the check properties or inherited from the properties of the folder where the checks are stored For further information on how to inherit properties please refer to the Inherit properties from folders section in this chapter GFI Network Server Monitor Configuring GFI Network Server Monitor e 24 Configure general parameters Properties TMJASON ICMP Ping can ping xi General Check Parameters Logon credentials Actions Dependencies Maintenance Check details ET Check Name TMJASON ICMP Ping can
63. Monitor engine service multi threading engine able to run 24 checks at a time e NSMATTENDANT exe Service which controls web result monitoring web server access etc Network Server Monitor Engine The GFI Network Server Monitor Engine is a windows service that polls the servers in your LAN WAN for availability at specific time intervals This is a multithreading service allowing 24 simultaneous checks to take place at the same time NOTE GFI Network Server Monitor only makes use of the protocols and application layers available in the Operating System for running its checks thus no agent software installation is required on the servers to be monitored Network Server Monitor configuration The GFI Network Server Monitor configuration program is the user interface to the GFI Network Server Monitor engine Use this module to configure all settings required for GFI Network Server Monitor To launch this module go on Start gt GFI Network Server Monitor program group gt GFI Network Server Monitor configuration GFI Network Server Monitor Introduction e 7 FE GFI Network Server Monitor 7 0 Miel x E GFi SECURITY amp MESSAGING SOFTWARE GFI Network Server Monitor File Tools Help e amp Tools Explorer g GFI Network Server Monitor 4 Monitoring Checks Configuration Monitoring Checks Status B g Program Configuration E es Users and Groups 4 Alerting Options General Options Database Maintenance Options
64. Ms Access database backend 1 Select the MS Access option and specify the full path including file name of your MS Access database backend 2 Click on OK to save your configuration settings NOTE If the specified database file does not exist it will be created for you GFI Network Server Monitor Database maintenance options e 146 MSDE MS SQL Server database backend Database Options xi General M Current database settings amp Database Type MS Access Database Path C Program Files GFI Network Serve User Admin New database settings Indicate bellow the new type of database backend to use C MSAccess MS SOL Server Please specify the name or IP of the machine containing the SOL Server MSDE database to use Server JasonTest J Use SQL Server Authentication User JasonM XXXXXXXXXXXXXXXXXXX Password Cancel Apply Screenshot 132 MSDE MS SQL Server backend properties dialog To use an MSDE MS SQL Server database backend 1 Select the MS SQL Server option and specify the name IP of your SQL Server 2 Specify the authentication mode to be used when logging on to the SQL Server GFI Network Server Monitor supports both Windows NT and SQL authentication modes To use SQL authentication select the Use SQL Server Authentication option and specify the SQL Server access credentials For Windows NT authentication mode select the Window
65. NG This check is based on a script which requires WMI to be installed on both this computer and the target computer lt Back i Cancel Screenshot 65 LDAP Query check parameters dialog No Setup parameters are required for this check Physical disk conditions check NOTE This monitor function requires WMI to be installed on the computer running GFI Network Server Monitor as well as on the computer being monitored GFI Network server monitor can check the physical condition of the disk drives mounted on computers running windows operating systems GFI Network Server Monitor Configuring monitor functions e 72 New Check Physical Disk Conditions checks Check the physical health of the disk drives on the target machine s running SS Windows This check does not take any parameters It will check the physical health of the disk drives on the target computer s running Windows G WARNING This check is based on a script which requires WMI to be installed on both this computer and the target computer lt Back n gt Cancel Screenshot 66 Physical Disk check parameters dialog No parameters are required for this function Printer availability GFI Network Server Monitor monitors the availability of network printers by checking their status definition Supported status definitions include Running In Test Power Off Offline and Power Save If the Printer Status is not
66. Network Server Monitor e Event Window right view Multipurpose window in which the contents and options related to the nodes selected in the Tools explorer left window are displayed e g Clicking on Monitoring Check Status node in the Tools Explorer will display the status of monitoring checks in this window The GFI Network Server Monitor configuration module can be installed on any local or remote workstation server running Windows 2000 or higher GFI Network Server Monitor configuration connects to the GFI Network Server Monitor engine for retrieval of monitoring data Network Server Monitor Attendant The GFI Network Server Monitor attendant module is the service responsible for web result updates and the NSM web server License scheme NOTE The evaluation period allows you to explore and use all features present in GFI Network Server Monitor You can purchase a license key online from GFI and use this key without the need to re install GFI Network Server Monitor More information on how to order a license key is available at http Avww gfi com pricing pricelist aspx product NSM GFI Network Server Monitor Introduction e 8 Installing GFI Network Server Monitor System requirements Supported operating systems x86 or x64 e Windows 2008 R1 and R2 Standard Enterprise e Windows 2003 Standard Enterprise e Windows 2000 Professional Server Advanced Server e Windows 7 Standard Professional
67. QL Server databases GFI Network Server Monitor Installing GFI Network Server Monitor e 14 11 Specify the installation path for GFI Network Server Monitor and click on Next The installation will need approximately 30 MB of free disk space 12 Click on Finish to finalize the installation and launch GFI Network Server Monitor Entering your license key after installation If you have purchased GFI Network Server Monitor launch GFI Network Server Configuration right click on Licensing in the General node and select Enter License key Enter the license key in the dialogue on display and click on OK NOTE 1 By default GFI Network Server Monitor has an unrestricted fully functional evaluation period of 10 days If the data you provided in the download form is correct you will receive by email a license key which enables you to evaluate GFI Network Server Monitor for 30 days NOTE 2 You must have a GFI Network Server Monitor license for every server that you wish to monitor NOTE 3 Entering the license key should not be confused with the process of registering your company details on our website This is important since it allows us to give you support and notify you of important product news Register on http www gfi com pages regfrm htm Changing NSM Engine Service logon credentials after installation The GFI Network Server Monitor Engine Service account details are set up during the insta
68. R EA ER 172 Writing your own monitoring functions 173 INTOGUCHON neie n a a a a e E E a A ET 173 WYitiNng amp SCIIPU FUNCTION rerata ete riein a AAAA RATKA E REAR AN YALA AERA TAAA EELA EE KEANNA 173 Adding a monitor function written in VBscript sssesssssssssssssirssesrrssrirnssrinnnsrinnssrennnns 174 WMI Windows Management Instrumentation esseeeeeeeeesseeesesrnsssirresrrrsnrirnssrennens 176 ADSI Active Directory Service Interfaces ccccccceeeeeceeeeeeeeeeeeeeeeeeeeeeaeeeeaeeseeneess 176 Troubleshooting 177 INTOGUCHON Aint et ataa Aiea aatan ae dion eaten eta 177 Knowledge Base tec cise cis naira a hd Seca tel tees a A utes Geen ct elvaa A 177 Waeb FOM raar anes haw eea A teed vars tie oa E 177 Request technical support c ceeeececeeeeeneeeeeeae eset teases eeeaaeeeeeeaaeeeeetaaeeeeeeaeeeeeenaeeeeee 177 Build notifications oei ie eit eee tee ae hid eae heeded nied 178 Index 179 GFI Network Server Monitor eiv Introduction Introduction to GFI Network Server Monitor GFI NSM GFI Network Server Monitor is a network and server monitoring tool that allows administrators to monitor the network for failures or irregularities automatically With GFI Network Server Monitor you can identify problems and fix unexpected conditions before your users or managers report them to you GFI Network Server Monitor maximizes network availability by monitoring all aspects of your servers including UNIX LINUX servers
69. S 8hrs 11 min On Hold ANDREM GFI Content Security Attendant Status From To Duration Reason 01 08 2005 01 08 2005 ma ouu 00 00 00 09 18 47 Swsdamn gt r 01 08 2005 0108 2005 5 4 Disabled 09 18 47 17 29 48 8 hrs 11 min On Hold E Done My Computer Screenshot 143 The availability detailed report Availability Summary Report The Availability Summary Report contains information showing the state of target computers over a specified period of time GFI Network Server Monitor Reports Wizard Report Type Select which type of report to generate Select the type of report to generate Availability Detail report This report type will contain all status changes including a description for each status change of all selected checks between the specified time frame This report type contains percentages of all status types for all selected checks between the specified time frame lt Back Cancel Help Screenshot 144 First Stage of the report wizard Report Type dialog To generate an Availability Summary Report GFI Network Server Monitor Reporting 158 1 Launch the report wizard and select the Availability Summary Report option 2 Specify the rest of the required settings in the same way as described for the creation of an Availability Detail Report For more information refer to the Availability Detail Report section in this chapter 3 GFI Network Server Monito
70. Start Wizard and click on Next uick Start Wizard Step 1 5 Specify the OS of the server s to monitor Specify the operating system of the server s which will be monitored S amp S KE windows 2000 Server Y Windows XP Windows 2003 Server Suse Linux S Redhat Linux Mandrake Linux Fedora Linux Q lt Back n gt Cancel Screenshot 10 Specify the OS of the target computer 2 Select the operating system installed on your target computer s GFI Network Server Monitor Configuring GFI Network Server Monitor e 17 Quick Start Wizard Step 275 Specify the services the server s provide Specify the services running on the target server s Sp ER DHCP Server SJ WINS Server Application Server G Terminal Services ES Print Server 0 Pa web Server 5 O giis Web Server O SMTP Server O Fi web Server oO Fa FTP Server O E3 Application Firewall aj S MA ISA Serwer 2A lt Back n Cancel Screenshot 11 Specify the services provided by the target computer 3 Based on the operating system selection GFI Network Server Monitor brings up a set of applicable roles for that operating system Select any additional roles that the target computer s have within your network Click on Next to continue Quick Start Wizard Step 3 5 Specify additional applications installed which need to be monitored Q Specify third party applications which are ru
71. TE By default GFI Network Server Monitor uses the same security context account used by the GFI Network Server Monitor engine Properties TMJASON File Existence file Y oNSMINSTALLDIR o Order txt xi General Check Parameters Logon credentials Actions Dependencies Maintenance Logon credentials Inherit authentication and access credentials from parent folder This monitoring check will connect to the target machine s using the security context of the account under which the NSM engine service is running C alternative credentials User name OO Password SS certificate authentication Linux Unix logons User name ason Certificate file ESGFILLNSS cer 0 Note To monitor Windows computers you need to specify alternative credentials or use the security context under which the NSM engine service is running To monitor non Windows computers such as Linux machines you need to specify alternative credentials or a certificate authentication file OK Cancel Apply Screenshot 21 Logon Credentials Setup Dialog To setup alternative or certificate authentication credentials 1 Right click on the check to be configured and select Properties By default the check properties dialog will open in the General tab 2 Click on the Logon Credentials Tab If the Inherit authentication and access credentials from Parent folder option is selected unselect it and choose the Alternati
72. Workstations False i i J indows server 2003 Server D Lensing gil ISASERVER Wind 2003 s coe ee How to purchase S pisaba ver z Windows for workg False Support Center Knowledge Base Start gathering information GFI LANguard N S S Getting the computers of afimalta GFI LANguard S C Ready Found 69 computers GFI LANguard S E L M GFI Network Server Monit E Screenshot 146 Enumerate computers General Tab options To setup the required parameters 1 Click on the general tab 2 Specify the domain where a search is to be made e g GFIMALTA 3 Specify the computers which need to be listed e Select Enumerate All computers to display all computers in the domain GFI Network Server Monitor Network tools 160 e Select Only these to specify which computers to look for Define selection criteria parameters to be used from the Operating System Computer services and Computer type options available 4 Click on the Advanced Tab and choose the search method by marking Enumerate from Active directory or Enumerate using Windows Explore Interface FE GFI Network Server Monitor 7 0 BEE File Tools Help e gt Mm Tools Explorer a A 7 5 lt lt lt lt lt lt Enumerate computers in domain afimalta fsal etrieve E GFI Network Server Monitor E out H e _Batieve_ es S EG Monitoring Checks Configurati ao ON 3i ALEXC DEVMC
73. a SSH to determine the members of a specified group lt Back n gt Cancel Screenshot 86 Users and Groups check parameters dialog The User Group membership function requires the following parameters e Group Specify the name of the group to be checked against intruders e Allowed members Specify the list of authorized members in the specified group Separate each member by a comma e g JasonM NickG AndreM Disk Partition Checks GFI Network Server Monitor uses a Linux Shell script to check the state of mounted disk drives on a target computer running on Linux Unix GFI Network Server Monitor Configuring monitor functions e 91 New Check Disk Partition Checks Check the mount state of a disk drive on the target computer s running Unix SSO1_Pri_NetSr4 Screenshot 87 Disk Partition check parameters dialog The parameters required by this function are e Partition label Specify the identification name of the disk partition to be checked Disk Space Check GFI Network Server Monitor can check for available free or used disk space information on local and remote target computers running on Linux Unix Alerts can be sent when the used or free space exceeds a specified limit GFI Network Server Monitor Configuring monitor functions e 92 New Check Disk Space Check for free disk space on local and remote computers Check that the Drive on the target computers
74. ail to one or more recipients Jason ABCLtd com i G Click here to load a sample lt Back Next gt Cancel Screenshot 41 SMTP server check parameters dialog The SMTP Mailserver check requires the following parameters e Port Specify the TCP port to be used when connecting to the SMTP mail server SMTP Default port is 25 e Timeout Specify the connection timeout in milliseconds The check will fail if a connection is not established before the specified timeout elapses e Requires an encrypted connection SSL Select this option if you want to encrypted the transmission i e establish a secure session by electronically authenticating each end of an encrypted transmission e Login to mailbox Select this option if you want to verify mail box authentication on your mail server e Send an email to one or more recipients Select this option if you want to verify your SMTP server s functionality by sending a test email to particular recipients To specify the sender and recipient s email address click on Configure NOTE When the Login to mailbox option is selected alternative credentials will be required so that this check can remotely logon to the mailbox on your SMTP server The New Check Wizard automatically prompts you to configure these alternative credentials i e the user name and password during the creation of this check After the check has been created you ca
75. ailability of a target computer s Generic TCP IP Check local or remote servers by challengi E Email Route Ensures that the email is working properly b EISNMP E Generic SNMP The SNMP GET message allows an inform Windows OS E lt Back Cancel Screenshot 14 Select Type of Monitoring Check required 2 Select the type of monitoring check to create e g if you want to check the availability of a target computer select ICMP Ping Click on Next to continue Configuring GFI Network Server Monitor e 20 New Check ICMP Ping Check availability of a target computer s SS Ping the target machine and process the results returned Make sure you can ping the target computers This check will fail if the following parameters are not met Send js echo requests Ensure that at least 4 replies are received Timeout msec for each reply 2000 G The Timeout field can be used to monitor the response time of a computer Click here to load a sample lt Back n gt Cancel Screenshot 15 ICMP Ping check properties dialog 3 Configure the parameters to be used by the selected check Click on Next to continue The ICMP Ping check requires the following parameters e Make sure you ping the target computer Specify whether the ping will succeed or fail if a ping reply is received e Number of Echo requests to send Specify the number of consecutive pings t
76. anantiain Akkan nist Niashlad 20 INT ANNE 17 NC 1N Screenshot 98 Monitoring Check Status tab GFI Network Server Monitor Monitoring checks status e 102 The GFI NSM Activity Monitor also includes a Monitoring Checks Status tab This displays information on monitoring checks such as the current state and the date time of the last change in state Since checks are stored in folders you can also choose to see only the checks which are contained in a particular folder of interest Folders are selected from the Folder Name drop down included at the top of the dialog For example to see all of monitoring checks which are configured in GFI Network Server Monitor irrespective of which folder they are contained in select All folders from the available drop down list Viewing the state of checks from a web browser GFI Network Server Monitor also ships with a remote web monitor This allows you to remotely view the status of checks via Internet Explorer over a network or Internet Through the remote web monitor you can examine the status of your network from virtually anywhere both within and outside the company s building By default the remote web monitor supports two views These are the Normal view and the Mobile Device view Normal view 3 GFI Network Server Monitor 7 0 Status Monitor Microsoft Internet Explorer OF x File Edit View Favorites Tools Help ay Q sak Q x ia a pO search Se F
77. and results interface TERMS OF USE You are not authorized to access or query our Whois Whois query results Screenshot 151 Whols tool results 1 Specify the parameters required for this tool e Domain Name IP Address The hostname IP to resolve and retrieve details for e Whois Server The server which will process the query and supply the information related to the defined host 2 Click on Retrieve to start the search Traceroute This tool shows the network path that GFI Network Server Monitor followed to reach the target computer When you perform a trace route each hop has an icon next to it which indicates V A successful hop taken within normal parameters amp A successful hop but time required was quite long amp A successful hop but the time required was too long X The hop failed timed out i e it took longer then 1000ms GFI Network Server Monitor Network tools e 165 FE GFI Network Server Monitor 7 0 olx File Tools Help e gt Tools Explorer a GFI Network Server Monitor B Monitoring Checks Contfic Options a a AE TMIASON 1 10 130 130 1 General ps 1 10 52 104 113 a DEF LTD IV Do not resolve IPs CI XYZLTD 1 10 52 50 169 Monitoring Checks Status 1 80 85 99 10 J Repeat trace every 20 seconds A le Program Configuration 1 195 13 13 2 S
78. arget computer s Check that the DNS server on the target computers returns all of the specified values Type of record Address A record he Host Domain to query www google com Result processing Record values 209 21 7 53 213 Interpretation of values Find all of the specified values ignore other values he Gi The DNS server check supports querying for multiple return values which can be specified by separating the values with a comma The check will fail both if an unknown value is found or else if one of the specified values is not found Click ferg to load a sample lt Back Next gt Cancel Screenshot 43 DNS server check parameters dialog The DNS server check requires the following parameters e Type of record Specify the record type which needs to be defined by the DNS server This can be an A record or any other record type present in the drop down list e Host Domain Name to query Specify the hostname or domain that you wish to resolve E g www google com e Record values Specify the expected return value s This is the value string which will be compared to the value returned by the DNS Server i e the return value E g If an A record type was selected the check will query the DNS server to resolve the IP address of the host domain specified in the Host Domain to query field This query should return one or more IP addresses which will
79. as Move checks between existing folders 0 0 eeeeeeeeeeeeeeeeeteeeeeeneeeeees Copy checks from to existing folders cccceeeeseeceeeeeeeeeeeeeeeeeeeeeees Configuring monitor functions aiizel Breie g EEan EEEE cee aie vee cede bette tee ae E hl Network Internet monitor functions 0 0 00 cee cece ccce ee ceesseeeeeesaeeeeeeeaeeees ATT P AT TPS functiones naea IMAP Mailserver Check cccccccccecccsceeeccsssecesseeeeseesuuaeeeesauauas NNTP news server availability ccc ceceseeeeeeneeeeeeneeeeeeaee POPS Mailserver Check ccccccceececceessceeeeeeeseseeseeaeaneeeeeeness SMTP Mailserver Check 0 cccccceeeeeeececeeessseeeeeeceeeeeeeaneaeees GFI Network Server Monitor Contents e i NTP Time Server availability cccccccccseeeeeceeceeeeeeeaeeeeeaeseeeeeseaeeeseaeeseeeeenaees 49 DNS S6rVeriGNneCk ei sereciicssvessaseziasdedactevuacondavigddeveauascnesstadishesuneatiantd Jdveraisazee s 49 COMP RO raaa aaraa a paa annaa pia d ao Aaa aae aA Ar DRNEA i 51 Generic TCP IP Ch6Gk i ccscsseveccensascdscsteves cansszedeczaveaccnantscccvbevateapiagtdcdunetedeauaeds 52 Email Route Check errietara iinan eeeeeeaeeeceeeeeeeeeaaaeaeceeeseseeaaaeeeeeeeeeeesennaees 53 Configuring the SMTP Server detalls cccccccceccesseeceeneeseeeeeseaeeeeneeeeeeeeeaas 56 SNMP monitoring CHECKS cccccceeeceeeeceeeeeeaeeeeaaeeeeneeseaeeecaaesseaaeseeeeesaeeesaeeseaeeeeaees 58 Generic SNMP function
80. ath to the SSH script file which will be used by the monitoring check to test the specified target computer s Edit Argument xi Argument value CHECK TARGET gt Argument description The target computer name a Screenshot 79 The parameters dialog e Arguments In the arguments list specify any additional parameters required by this function During check execution these parameters will be automatically passed on to the SSH script in the order specified in the arguments list To add a parameter double click on the position row where you wish to add an additional argument and specify the required values in the parameters dialog Parameter values can be specified as a string or can be passed on through system variables e g USERNAME NOTE 1 Strings which contain spaces must be specified within double quotes e g Mail Server GFI Network Server Monitor Configuring monitor functions e 84 NOTE 2 You can make changes to the selected script file by clicking on the Edit script button NOTE 3 The Generic Secure Shell SSH Check requires logon credentials i e username and password or Private Key file to connect authenticate and run SSH scripts on a remote Unix based target computer These credentials must be specified from the Logon Credentials tab available in the properties of the relative check For more information on logon credentials please refer to the Lo
81. ation on screen NOTE For security reasons we recommend the use of Microsoft IIS web server for accessing and viewing the state of your monitoring checks For further information on IIS web server setup refer to the Configuring IIS as the web server section in the General Options chapter NOTE The default port used can be customized from Configuration gt General Options gt Web Server Check state indicators Check state indicators are images which graphically define the current state of your monitoring checks The following is a list of states which any monitoring check can have T Queued Check is waiting to be processed e Success Check successful e Failure Check not successful failed A check is not marked as failed on the first unsuccessful result At first the check is placed under a Pending Failure state After some time the check is re run to verify that the check is indeed failing Once a failure threshold configured in the check folder properties is exceeded the check is deemed to be definitely failing and placed in the Failure state For more information on errors and error threshold parameters please refer to the Configure monitor check properties chapter in this manual e Disabled User configured this check not to be run For more information on how to enable disable checks please refer to the Enable or disable checks section in this manual Not Mon
82. avorites 4 iy Roa jw rel 33 Address a http jason 11695jlist html gt Go Links SnagIt py SECURITY amp MESSAGING SOFTWARE gt Home Status All checks iM Server Monitor Status All Checks E asc Ltd E amp oS and Services Checks L 4 Status Check Hame Date Time More Information JASON GFI LANguard N S M 3 04 49 6 0 attendant service S200 PM enon JASON GFI LANguard NSM 8 5 2005 3 04 49 On Hold 6 0 engine service PM JASON Kaspersky Anti Virus 3 04 49 for Windows Workstations v5 ope PM nition Disabled Disabled Disabled Disabled JASON Event Log Service 6 5 2005 aa On Hol Disabled JASON ICMP Ping 8 5 2005 es On Hol 3 04 53 nunnan E Done Screenshot 99 Remote Monitor All checks page The Normal view displays information in a layout structured for viewing on normal sized screens e g computer monitors To inspect your network status in Normal view open your Internet Explorer and type in the following URL http lt P address or computer name gt 11695 list html NOTE The lt P address or computer name gt in the URL is the Name IP of the computer where GFI Network Server Monitor is installed GFI Network Server Monitor Monitoring checks status e 103 By default the normal view opens up in the All checks page This page displays the status of all checks currently configured in GFI Network Server Monitor The navigation
83. ay This template email contains all the required SMS alert details including the SMS text message and the recipient s number Clickatell then converts this email to SMS and sends it to the intended recipient For more information visit http Avww Clickatell com brochure products api_smtp php GFI Network Server Monitor Global alerting options e 118 GFI Network Server Monitor Alerting Options xi Email Network SMS Specify settings for available SMS systems through which SMS alerts will be sent Select SMS System Clickatell Email2SM5 Service Set properties for the selected SMS system Property Value SMTP server mysmtpserver SMTP port 25 From myself mydomain com To sms messaging clickatell com a cc Optional settings Edit Retries 3 time s Format SMS message Cancel ae Screenshot 110 Clickatell Email2SMS Service configuration dialog Requirements No specific hardware is required for this SMS messaging method The only true requirements are 1 You must be subscribed to the Clickatell SMS gateway service This service costs about 4 euro cents per message To subscribe visit http www Clickatell com central campaigns redir php cid 870 2 The SMTP server configured in the properties of the Clickatell Email2SMS service must be able to send emails over the Internet NOTE GFI Network Server Monitor cannot send SMS alerts through Clickatell Ema
84. be compared to the IP s specified in the Record Values field NOTE Since a DNS query can return more than one IP address this check allows you to specify multiple return values separated by a comma e g 209 217 53 213 66 1 72 16 32 e Interpretation of values Specify how this check will interpret the result after comparing the returned value to the parameter specified in the Record values field E g If you select Find all of the specified values fail if other values are found the check will fail only if the returned value does not entirely match to the value specified in the Record values field GFI Network Server Monitor Configuring monitor functions e 50 ICMP Ping The ICMP Ping function checks the availability of a remote host by sending ICMP Echo commands and waiting for the response from the host NOTE Although local hosts should normally respond to ping requests within milliseconds an ICMP timeout failure doesn t necessarily mean that the remote host is actually functioning beyond its ability to echo packets New Check ICMP Ping Check availability of a target computer s S Ping the target machine and process the results returned Make sure you can M ping the target computers This check will fail if the following parameters are not met Send a echo requests Ensure that at least 4 replies are received Timeout msec for each reply 2000 G The Timeout fie
85. ble wizards Quick Start Wizard The Quick Start Wizard helps you quickly create and setup a batch of monitoring checks suitable for your network This wizard is automatically launched the first time that GFI Network Server Monitor is started in order to help you get your network monitoring system up and running in the least possible time FE GFI Network Server Monitor 7 0 of x File Tools Help e gt 0mo sF 2 Took Explore Ce r State TT GFI Network Server Monitor CABC Itd lt Folder gt Specified in Monitoring Checks Couatiquation MAAR Lid lt Folder gt Specified in Monitoring Checks Folder lt Folder gt Specified in EB Program Configuratio L End Folder Ctog Checka lt Folder gt Specified in Users and Group Duick Start Wizard Q Users Refresh ose B Groups Alerting Options 4 General Options Database Options 2 4 Tools O General 2 f4 Folder s 0 Monitoring Check s Number of IPs Computers being monitored 57100000 7 Screenshot 9 Launching the Quick Start Wizard from the Tools Explorer window GFI Network Server Monitor Configuring GFI Network Server Monitor e 16 Once ready you can still make use of this wizard by launching it from File gt New gt Quick Start Wizard or Right Click on the Monitoring Checks Configuration node in the Tools Explorer window and go to New gt Quick Start Wizard Running the Quick Start Wizard 1 Launch the Quick
86. by electronically authenticating each end of an encrypted transmission New Check IMAP Mailserver Check Check the availability of an IMAP server by connecting and authenticating to SS a mailbox and retrieving the number of mails from the IMAP folder Specify any additional parameters which GFI Network Server Monitor is to use to connect to the IMAP Server on the target computer s Pott 143 Timeout 7000 milliseconds Requires an encrypted connection SSL Mailbox accessibility After successful connection to the IMAP server check the mailbox accessibility JV Perform server authentication Specify mailbox logon credentials in the next dialog Iv H Inbox iess than fio G Click here to load a sample lt Back n gt Cancel Screenshot 38 IMAP server check parameters dialog The IMAP check requires the following parameters GFI Network Server Monitor Port Specify the TCP port to be used when connecting to the IMAP mail server IMAP default port is 143 Timeout Specify the connection timeout in milliseconds The check will fail if a connection is not established before the specified timeout passes Requires an encrypted connection SSL Select this option if you want to encrypt the data during transmission Login to mailbox Select this option if you want to physically check whether a mailbox on your mail server can be logged on to Mail count in folder Select thi
87. ce only In this case the check succeeds if the specified file is found e File must contain string Enable this flag and specify the string to be searched for in the existing file contents In this case the check will succeed only if the file exists and the specified string is present in the file contents CPU usage Check GFI Network Server Monitor can monitor the CPU usage of a target computer running on Linux Unix This function uses a Linux shell script to determine via SSH the global CPU usage and can send alerts or trigger actions when the processor usage exceeds the specified CPU usage limit New Check CPU Usage Check global CPU usage on a target computer s SX Maximum global CPU usage allowed 50 Gi Uses a Linux shell script via SSH to determine the global CPU usage Click here to load a sample lt Back n gt Cancel Screenshot 81 CPU usage setup window A CPU Usage function takes the following parameter e Maximum global CPU usage allowed Specify the maximum CPU usage allowed on the target computer being monitored Directory size Check GFI Network Server Monitor can check the size of directories located on target computers running on Linux Unix You can use this function as a disk quota manager which can send alerts when a directory exceeds the specified size GFI Network Server Monitor Configuring monitor functions e 86 New Check Folder Size Check disk space use
88. ceduro isien nren irka NEEE KONEEN RANNE EE RA Entering your license key after installation eeeseeeeeeeeeeeeneeeeennnn Changing NSM Engine Service logon credentials after installation Configuring GFI Network Server Monitor Getting started with GFI Network Server Monitor cccseeeeereees Quick Start Wizard 0 cccecceecceec cece ceeeeeeeeeeeeeeeeeeeeesaeesaaeseaeseaeeeaeeeeeneees Creating monitor CHECKS ccecceeeseeeeeeeeeeeeeeaeeeeaeeseneeeeaeeesaeeeeeeeeaas Configure monitor Check properties eccccceseeeeseeceeeeeceeeesseeeeeeeeees Configure general parameters cccccceeeeeceeeeeseeeeeeeeeeeeeeees Configure check functional parameters ccceeeeeereees Define logon Credentials 2 00 0 cceecceeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeees Configure alert parameters ccccceeeeceeeeeeeeeeeetaeeeeeeteeeeee Run an external file after an alert is triggered ee Restart computers services after an alert is triggered Set up dependencies ccceecceceeeeeeeeeeeeeeceeeeeeaeeeeeeeeenees Define maintenance SCHECUIES ceeeeeeeeeeeeeeeeeeneeeeeeeeeees Inheriting check properties eee eeeeeeeeenneeeeeenaeeeeeeaeeeseeaeeeeeenaeeeeeeaas How to set a folder to inherit properties from a parent folder Enable or disable checks 000 cccceeeececeeeenneeeeeeaeeeeeeaaeeeseeaaeeeeeeaeeeeeeaas Testing checks for correctness ecceeeeeeeeeeeeeeeeeenaeeeeeeaaeeeeeeaeeeenea
89. cks must run under a Local or Domain Administrative account Failure to run this check under such security contexts will cause this check to fail with the error Failed to establish a terminal server connection Terminal Services Physical Logon Check GFI Network Server Monitor can check for the availability of Terminal Services by simulating a remote user session on the terminal server of the target computer GFI Network Server Monitor Configuring monitor functions e 82 New Check Terminal Services Physical Logon Check Checks the availability of Terminal Services by creating a user session on the terminal server on the target computer s RDF file C Windows Default rde ae Timeout 30 seconds G This check applies to Windows Server 2003 operating system The NSM Engine service needs to run under an administrative account security context lt Back n gt Cancel Screenshot 77 Terminal Services Physical Logon check parameters dialog The parameters required by this function are e RDP File Specify path were the Remote Desktop Protocol RDP file is located e g C Documents and Settings lt relative user folder gt Recent default rdp e Timeout Specify the number of milliseconds before the function times out Usually a connection to the server is established within 1 second However some slow busy servers need more time Recommended value is 7000 milliseconds NOTE 1 The RDP fil
90. configuration GFI Network Server Monitor 7 0 File Tools Help e aml Tools Explorer Lol x Service Status GFI Network Server Monitor HSM engine status Monitoring Checks Configuratior JASON Started Last results update 7 28 2005 4 46 05 PM ABC Ltd H E Network Zone 1 E Network Zone 2 E Network Zone 3 E Network Zone 4 Monitoring Checks Status B gs Program Configuration i Users and Groups Q Users B Groups Alerting Options 4 General Options Database Options 5 Tools Zg Enumerate Computers Zg Enumerate Processes Zg DNS Lookup Whois Z Traceroute Ze SNMP Audit Z SNMP Walk EGO General EA Version Information A Licensing How to purchase Support Center Knowledge Base GFI LANguard N S S GFI LANguard P S C GFI LANguard S E L M Presently failed monitoring checks Check name Failure date alure Ume Reason DNS server was queried response not 5 ISASERVER DNS Server query matched response Down for 00h 00m www google com result 209 217 53 213 712812005 4 02 10 PM Last 10 actions taken Check name Action date Solon ime Action taken No actions taken List of folders E JASON asc ita amp amp Network Zone 1 C ANDREM 2 ANGELICA S E DAVIDNF 5 JASON 5 JENSTEST amp Ronon E Network Zone 2 E Network Zone 3 E Network Zone 4 GFI Network Server Monitor Screenshot 93 Monitoring Check
91. d ZONE1 right click on ZONE1 then go on New gt Folder NOTE 1 To create a folder in root right click on the Monitoring Checks Configuration node then go on New gt Folder NOTE 2 After evaluation you can use the nested folder feature only if you own a Consultant or Enterprise license for GFI Network Server Monitor If you have purchased a Professional license you can create folders but only under the root folder Monitoring Checks Configuration Properties ABC LTD Ed General Logon credentials Actions Dependencies Maintenance Folder details EZ Folder Name aBC LTD Folder Description Contains the rules used to monitor computer Inheritance Target 4 P Inherit target computer from parent folder SF Monitoring checks contained in this folder will apply to the following computer Hostname IP TMJasorl Scan Frequency F Inherit scanning frequency from parent folder ef Run the monitoring checks contained in this folder once every 2 minutes v minimum 5 seconds Error Threshold E Jnhent error threshold from parent folder Consider a monitoring check contained in this folder as a fail after E errors Cancel Apply Screenshot 91 Folder properties dialog General Tab GFI Network Server Monitor Check folders e 96 2 Specify the folder details i e folder name e g TMJASON and folder description 3 Configure the rest of the folder properties in the same way a
92. d by a folder on a target computer s SS Check that the size of the folder including subfolders bin does not exceed the following size 1024 KB be Gi Uses a Linux shell script via SSH to determine the folder size Click ferg to load a sample lt Back Next gt Cancel Screenshot 82 Directory folder Size setup window A Directory Size function requires the following parameters e Directory Name Specify the path to the directory to be monitored e g User personal e Directory size Specify the maximum size in KB MB or GB allowed for this directory File size Check GFI Network Server Monitor can check the size of files on target computers running on Linux Unix This function can be used as a disk quota manager which can send alerts when a specific file exceeds the specified size e g you can receive alerts when the system status log file exceeds the specified size enabling you to free used disk space GFI Network Server Monitor Configuring monitor functions e 87 New Check File Size Check the size of a file on a target computer s SS Check that the size of the file etc passwd does not exceed the following size 1024 KE bd lt Back Next gt Cancel Screenshot 83 File size check parameters dialog The File Size function requires the following parameters e File name Specify the complete path to the file which needs to be monit
93. d to be shown by selecting one of the following options e Select this computer to use the performance counters available on the target computer e Select another computer and specify the computer name to use performance counters available on another computer 2 Select from the available dropdown list the Object to be checked e g Select Memory to check the memory performance of the specified computer 3 Select the Performance Counter to be used e g Available bytes should determine the amount of physical memory in bytes available for system use process allocation e Value must be Select the operand that will be used for comparing the Performance Counter value to the comparison value specified e Comparison Value Specify the value with which the performance counter value will be compared Command Line executable output This function checks the text output of a command line tool application in order to determine if it is functioning correctly GFI Network Server Monitor Configuring monitor functions e 62 New Check Command Line Executable Output Checks the text output of a command line tool to determine proper functioning of the target computer s Run the file at location C Windows System32 Ping exe ve with the following parameters www afi com The check will succeed if the command line output of the above executable contains the string specified below does not contain
94. demstrings htm 6 Click on OK to close the configuration dialog 7 In the Retries entry box specify the number of redial attempts required before the connection is timed out 8 Click on OK to save your configuration settings GFI Network Server Monitor Global alerting options e 127 Add new SMSC providers GFI Network Server Monitor includes an extensive list of SMS service providers However it maybe necessary to add new providers from time to time To add a new provider 1 Right click on the Alerting Options node and select Properties 2 Click on the SMS tab and from the SMS System dropdown choose NSM 5 x 6 0 SMS Server 3 Click on the Configure SMS Settings button SMSC Entry xi Provider i Specify the SMS Service Provider details Country Provider Malta Test Provider Dial in number 21 26555599 Data format Speed Protocol Jani si 300 TAP z Password Comments For support call 2149111111 Screenshot 115 SMSC Provider Setup Screen 4 Click on New and specify the following parameters e Country Specify the country of the provider e Provider Specify the provider name e Dial in number Specify the number that the modem must dial to connect to the provider e Data format Specify the data format to be used Obtain this information from your service provider e Speed Specify the speed at which the data must be se
95. dentials or use the security context under which the NSM engine service is running To monitor non Windows computers such as Linux machines you need to specify alternative credentials or a certificate authentication file lt Back n Cancel Screenshot 17 Logon Credentials dialog As an example the IMAP Mailserver check uses logon credentials to connect to the mailserver and check its availability In addition this check also requires alternative credentials to physically log on to target a mailbox i e perform a mailbox authentication check in order to count the number of emails in a specific folder within this mailbox By default logon credentials parameters are inherited from the parent folder To specify alternative credentials e g for mailbox access unselect the option Inherit username and password from parent folder option and configure accordingly Click on Next to continue Non computer specific checks Some type of checks e g http https are not computer specific While the web server may be running on a computer in your domain when querying a website you will not specify the target computer but the domain to query When this is the case you will be asked to select a folder under which to put the newly created checks GFI Network Server Monitor Configuring GFI Network Server Monitor e 23 New Check Select T arget Folder Select the folder in which the monitoring check will be created SI
96. ding and the verification of delivery stages to allow enough time for the test email to arrive to destination NOTE 2 Make sure that the email client of the recipient i e the person to whom you have addressed the test email is not open Otherwise the test email might be immediately downloaded from the POP3 IMAP server to the client before the delivery verification takes place hence causing the check to fail A separate mailbox which is used only by GFI Network Server Monitor should be used GFI Network Server Monitor Configuring monitor functions e 54 Configuring the sender s and recipient s email address Recipient and email format Es General Specify the recipient and format of email to be sent through the SMTP Server From abc afi com To wrx afi com Subject SMTP Server testing email Message body This mail has been sent by GFI Network Server Monitor to test the functionality of an SMTP Server to send email G Email messages are sent in plain text format Screenshot 47 The test email details dialog Click on the Configure button of the relevant section to specify the following parameters e From Specify the sender s email address i e the email account from where the test email will be sent e To Specify the recipient s email address i e the email account where the test email will be sent e Subject Optional Specify the text to be incl
97. e Daemons check requires the following parameters e Name Specify the name of the daemon that you wish to check e g Ipd e State Specify whether this check should verify if the daemon is running or stopped GFI Network Server Monitor Configuring monitor functions e 94 Check folders Introduction In GFI Network Server Monitor all checks are organised into folders Folders have properties such as alerts dependencies and maintenance parameters that are inherited by the checks contained in those folders This way it is easy to change an alert or dependency for a whole group of checks from a centralized point By default a check inherits properties from the parent folder however you can override this setting for individual checks if necessary PE GFI Network Server Monitor 7 0 BEES File Tools Help mf ee o E x Bg d Tools Explorer a GFI Network Server Monitor a Monitoring Checks Configuration 9 ABC Ltd SEMI DEF Li El Network Zone 1 H E ANDREM H E ANGELICA DAVIDNE H E JASON H JENSTEST 9 RODION1 E Network Zone 2 E Network Zone 3 E Network Zone 4 x 4 Folder s 0 Monitoring Check s E Network Zone 1 lt Folder gt Network Zone 2 lt Folder gt E Network Zone 3 lt Folder gt E Network Zone 4 lt Folder gt Screenshot 90 Nested Folders Nested Folders Folders contained in other folders are supported in the Enterprise Consultant Editions Nes
98. e GFI Network Server Monitor 7 Setup lei Es Import configuration setup Import configuration settings from an older installation Previous installation of GFI N S M detected Do you want to import your previous configuration files or re configure the application Import settings used in older build C Make a clean install Screenshot 4 Import settings from an older installation NOTE The following stage is required only if GFI Network Server Monitor 6 or higher have been previously installed on your computer 5 Choose whether you want to import configuration settings from an existing installation or else continue with a new clean installation Click on Next to continue GFI Network Server Monitor Installing GFI Network Server Monitor e 11 E GFI Network Server Monitor 7 Setup Se Eg License Key Enter the following information to personalize your installation Please enter your name company and license key If you do not have a license key you can use GFI N S M 7 as an evaluation version Full Name Jason Micallef Company GFI Software Ltd License Key Evaluation Cancel lt Back Screenshot 5 User and License key details NOTE The following stage is only required during a new clean installation 6 Specify the full user name the company name and the license key If you are evaluating the product leave the evaluation key as default i e Evaluation Click on Next to
99. e and select Properties 2 Click on the SMS tab and from the SMS System dropdown select NSM 5 x 6 0 SMS Server 3 Click on the Configure SMS Settings button 3 Choose the SMSC service provider from the list Click on Edit and make the required changes 4 Click on OK to save the changes Additional notes NOTE 1 SMSC providers require the connection speed Therefore configure this in the provider details GFI Network Server Monitor Global alerting options e 129 NOTE 2 The number format of a recipient depends on the provider when using SMSC This requires an amount of trial and error to find the right format for example if you live in the UK international dialing code 44 you should try 12345678 4412345678 004412345678 Format SMS pager message 1 Right Click on the Alerting Options node and select Properties 2 Click on the SMS tab and then click on FORMAT SMS MESSAGE Message Format xi SMS Message Format Subject Message DATEX TIME Check CHECK_NAME CHECK_TARGETZ Status CHECK_RESULT Reason 4CHECK_EXPLANATION IMPORTANT Maximum SMS message size is 160 characters Format Plaintext Bich text HTML Screenshot 117 SMS Pager Message Format Window 3 Make the necessary changes to the SMS message and click on OK to accept changes For more information on variables and message templates formatting
100. e creation of this check After the check has been created you can make changes to alternative credentials from the check properties dialog gt Logon Credentials tab When all required details have been specified click on OK to save and return to the Email Route check properties dialog Configuring the POP3 IMAP Server details General Specify the settings of the IMAP POP3 server to which a connection will be established Type Host name IP ZCHECK_TARGET Select Pott 110 Timeout 2000 J This server requires an encrypted connection SSL Outgoing server IM4P POP3 requires authentication C Use credentials set in the folder check Use the following credentials User name WRX XXXXXXXXXXXXXXXXXX Password G The host name IP can be set to CHECK_TARGET so that the target will be the folder check target Cancel Screenshot 49 POP3 IMAP Server configuration dialog Click on Configure and specify the following parameters e Type Specify the type of mail server that you want to connect to i e POP3 or IMAP GFI Network Server Monitor Configuring monitor functions e 57 e Hostname IP Specify the name IP address of the POP3 IMAP server to which this check will connect By default this parameter is configured to acquire its value from CHECK_TARGET variable This variable gets its value directly from the Target Computer field in the check properties If req
101. e is generated by the Remote Desktop connection client whenever a remote session is established e g Default rdp This file contains properties and parameters relative to the remote connection session made including authentication details and display settings which are used during each remote session NOTE 2 Terminal Services checks must run under a Local or Domain Administrative account Otherwise these checks will fail with error Failed to establish a terminal server connection Linux Unix OS generic checks Generic Secure Shell SSH Check The SSH Check function allows you to create custom monitor functions which can be remotely executed on Unix Linux based computers through the Secure Shell SSH service running on that computer Secure Shell sometimes known as Secure Socket Shell is a Unix based command interface and protocol for securely getting access to a remote computer GFI Network Server Monitor Configuring monitor functions e 83 New Check Generic Secure Shell SSH Check Use your own SSH script as 4 monitoring check SS Script file C Program Files GFI Network Server Monitor Scripts daemone Arguments Argument Description 4CHECK_TAR Target Computer Name D2 D3 Da amp 5 Edit script lt Back n gt Cancel Screenshot 78 SSH check parameters dialog A Generic SSH Script Check requires the following parameters e Script file Specify the p
102. e network path that GFI Network Server Monitor used to reach a target computer e SNMP Audit Performs an SNMP Audit in order to define weak strings e SNMP Walk Allows you to receive SNMP information from an SNMP Server Reporting GFI Network Server Monitor allows you to create reports that detail the availability of your network resources Such reports can be created in HTML as well as in XML CSV if they need to be imported by other favorite applications Other features e Allows you to specify maintenance periods to avoid alerts being sent during scheduled maintenance e Allows you to store check logs to text file e Allows you to setup dependencies to avoid receiving multiple alerts when the servers or services on which other computers depend are down or unavailable GFI Network Server Monitor Introduction e 6 GFI Network Server Monitor components GFI Network Server Monitor is a client server application based on a central monitoring service able to run on Windows NT or higher This application monitors servers and workstations in your LAN WAN or even outside your enterprise without the need of any other additional software This software architecture allows for high reliability and scalability to monitor both large and small networks GFI Network Server Monitor consists of 3 main modules which are e NSMUI exe Network Server Monitor configuration and user interface e NSMENGINE exe Network Server
103. eaaeeeeeeaaeeeeneaas 76 Generic ISA Server CheCK ccccccccccceeeeceeececeeeeecaeeeeaaeseeneecnaeeesaeeeeaaeeseneeeaas 76 Generic Exchange Server check sccceececeeeeeeeeeeeeaeeeeneeseeeeseaeeeeaaeseeeeeeaas 77 Generic MS SQL ADO CheCK ceccccceeeeeeeeeceeeee cae eeseaeeeeeeeseaeeesaeeeeaaeeeeeeesaas 78 Windows OS databases checks ccccceceeeceeeeeeeaeeceeeeeceaeeesaaeeeeeeeseaeeesaaeeeeaaeseeeeeeaas 79 Generic ODBC na a i a a a eae era 79 Terminal Services CHECKS cccccessececseseeeceeseeeeceeeaeeeseesaeeeseesaeeeesesaeeesseaeeesseneeeeseaas 81 Terminal Services Port Check cccccccsceeeeeeeeeeeeeeeeeeeeeeeseeeeeseaeeesaeeseeeseeeees 81 Terminal Services Physical Logon Check ccccceseeteeeeeeeeeeeeeeeeeneeteneeees 82 Linux Unix OS generic CHECKS 0 ccceeececeeeeeeeeeeeeeeeeeeeee cae eeeaaeseeeeeseeeeesaeseeaeeseeneess 83 Generic Secure Shell SSH Check cccceceeceeeeeeeeeeeeeeeeeceeeeeseaeeeeeeeeeeeeeaas 83 Linux Unix Operating System Checks ceccceeeeeceeeeeeeeee eee eeeaaeeeeeeeseeeesaeeeeaeeseeeeess 85 File existence CHECK avceis canadien canadien sndcadeealicdl censd setae AEE AAAS EEA A S 85 GPRUTusage GHOCK iasaiten tte te askdeves eatuinv aed eadeeveed teeta celty 86 Directory size Check scien inde eda araki a antes an iets 86 File Size GRECKA aE EEEE AEE AAE ES dabaaustedh ans sdsueasesteahs 87 Printer availability CNECK cc ccceee
104. eceeeeeeeeeeeeeee cee eesaeeeeeeeseeeeesaeeeeeeseeneees 88 Process Running Check as ernestinea tiaina annaa iaeiaiai aheu earra aidake eia 89 Users and groups membership Check cccecceceeeeeeeeeceeeeeseeeeeeaeeseeeeenaees 90 Disk Partition Checks ienesa aa E E EEA EEE 91 Disk Space GHOCK iii risiini pe r aAa e eaaa eaaa 92 Daemon CHECK siiin aea tuned a ae aeaa bette 93 Check folders 95 INTROGUCUOM MAE E E TEE E A E E EA E EA 95 Creating new Older S wiccscsscesscsctcesepeeccetapseceenandivesdeeut AEREA AEE ETEA TAE NEEE AEREE TE 96 Configure properties of existing folders sssssesssessiresirssiresirssinssinssrnssrnssrnnsnnsnn ne 97 Deleting foldeiSz sosise a a aaa a eaa Ea Aaaa a aara aaea arae aaa a toes 97 MOVING tolder S vu ace A edsaserwnaccpevvadstesteaedapecesd doa Raa iar deenaa Aaaa dA Da aaa piad EEEa AAS 97 Searching for folders an napre sevaalanienda iaeiesavsazecvadivaedundazsinia davyevateozievad dati esaideieens 98 Monitoring checks status 99 laligolo 6c ilo 9 Urn E EEA AET AATE AT EA 99 GFI Network Server Monitor e ii Viewing the state of checks from the GFI N S M Configuration cccceseeeeseeeeees 99 Viewing the state of checks from the GFI N S M Activity Monitor 0 seeeeee 102 Viewing the state of checks from a web DrOWSED c cece eeee tees ee eeaeeeeeaeeeeeeeeaes 103 Check state indicators ccccccecceeeceeceesceeeeeeeseaeeeeaaeseeeeceaeeeeaaeseeaeeseeeeesa
105. ed by Clickatell i e by the SMS gateway provider By default this property is set to sms messaging Clickatell com NOTE Leave this property as default unless otherwise specified by Clickatell e CC Optional parameter Specify the email address where you wish to forward copies of the emails sent to the web based SMS gateway e Subject Optional parameter Specify the text which you want to include in the email s subject field e Body line 1 Specify the API ID e g api_id 124576 The API ID is an identification number supplied to you by Clickatell after you subscribe for the service Format this parameter as follows api_id lt API ID No gt NOTE If you don t know your API ID ask Clickatell to supply you with this information e Body line 2 Specify your Clickatell SMS gateway user name e g user JasonM Format this parameter as follows user lt user name gt NOTE If you don t know your user name ask Clickatell to supply you with this information e Body line 3 Specify your Clickatell SMS gateway password e g password abcde Format this parameter as follows password lt password text gt NOTE If you don t know your password ask Clickatell to supply you with this information e Body line 4 Leave as default This property contains the number of the SMS recipient i e the number where the SMS will be sent This number is automatically passed on by GFI Network Server Monitor thro
106. efault This property contains the text which must be included in the SMS These contents are automatically passed on by GFI Network Server Monitor through variable smsmessage which is substituted to text when the email is generated The contents of this property are formatted as follows text smsmessage GFI Network Server Monitor Global alerting options e 123 4 In the Retries entry box specify the number of times that GFI Network Server Monitor will try to send the email to the web based email to SMS provider should the first attempt fail 5 Click on OK to save your configuration settings NSM 5 x 6 0 SMS Server system w MA us Ka GSM NAL Phone Modem Laptop with SMS Gateway Rr SMS Center ni TabletPC with Recipient GFI Network Server monitor i e bed SMS Gateway Machine with conncted GSM phone modem GSM Smart or Satellite phone Cell phone Figure 6 SMS alert flow via the NSM 5 x 6 0 SMS server The NSM 5 x 6 0 SMS Server can send SMS text messages through a TAP UCP compliant SMSC Short Message Service Center NOTE The Sender ID is the number of the sending entity Leave this empty if you want your ID to be withheld when sending a message Requirements This NSM 5 x 6 0 SMS messaging method requires a normal Hayes compatible modem connected to the server on which the GFI Network Monitor Engine is running When a check fails GFI Network Server Monitor uses the modem to dial in to the SMSC pro
107. elated to the activity of the monitoring engine Such information includes e The date and time of the activity e The type of activity e g Error Warning etc e A description of the event Icons on the left hand side of each event graphically indicate the event type These icons help you to easily identify the status without having to read the Type column details I GFI N 5 M Monitor lel Es Engine Status Monitoring Checks Status Folder Name All folders Checkname Status Last Status Change More Information Q ANDREM Disk Space C drive Disabled 26 07 2005 17 06 10 QANDREM Event Log Service Disabled 26 07 2005 17 06 12 QANDREM GFI Content Security Attendant Disabled 26 07 2005 17 06 10 Q ANDREM GFI FAXmaker Health Check Disabled 26 07 2005 17 06 05 QANDREM GFI LANguard N S M 6 0 attendant service Disabled 26 07 2005 17 06 10 ANDREM GFI LANguard N S M 6 0 engine service Disabled 26 07 2005 17 06 10 QJANDREM GFI LANguard N S S 6 0 attendant service Disabled 26 07 2005 17 06 10 QANDREM GFI LANguard P S C 2 0 attendant service Disabled 26 07 2005 17 06 10 Q ANDREM GFI LANguard E L M 5 0 Alerter agent ser Disabled 26 07 2005 17 06 10 QANDREM GFI LANguard S E L M 5 0 Archiver agents Disabled 26 07 2005 17 06 10 ANDREM GFI LANguard S E L M 5 0 Collector agent Disabled 26 07 2005 17 06 10 QANDREN GFI List Server Disabled 26 07 2005 17 06 10 COR AMDDEM REI M siID
108. enaees 133 Web Server Settings s sccnr qcassecie feet dat cavechacsceevsten ssluehda Jlepdest catudh ag dubaestecevucbeaoeiey Gases 134 Configuring IIS as the Web SCIVel ccsccceeeeeseeeeeeeeeeeeeeeteeeeseaeeteeeeeeeees 135 Securing the Remote Monitor cccsceeesceceeeeeceeeeeeaeeeeeeeeeeeeesaeeseaeeseeeees 138 Proxy Server settings cccccccscccsecceceecceeeseeeeseeseeeaesneceesaeseeaaeeanaesneeessaeeseeaesseeaeenaees 141 LOG TNESOTINGS spr araeir EaR RAEE ELARRE e EAA E EREL ISCR ERAT RIEKIE 142 Database maintenance options 145 INTFOGUCHON aeniea aaa aa ae ee ed 145 Configuring the database backend ccccccceceeeseeceeeeeeeteeeesaeeeeneeseeeesaeeesaaeeeeneeeaas 145 MS Access database backend esesssisssiesrrssrissrissrissrissrinsrinsrinsrnnnrnne 146 MSDE MS SQL Server database backend e eect eneenetneenaees 147 Users and Groups 149 INTOGUCHON 2 7 aaa Sea cee ee ae An at a Se ae Se ae 149 SOS IET EE A F PESO EA ETLE EEE E a Wedron athena ees 149 Adda NOW USGEM a iraani ARA A A A a A a ieai 149 Configure user s general parametersS sssesessssrissssrrsstrrrssrrnssrirnnsrennnnnnn 150 Define working NOUTS 00 2 cece eeeeeeeeeeeeeeeeeeeeeeeeeeeaaeeeeeeaaeeeeeeaaeeeeeeaaeeeeseaeeeeseaas 151 Define alerts to be used 20 0 eeeeeeeeeeeeeeeeeeeeeeeeeeaeeeeeeeaeeeeeeaaeeeeeeaaeeeeeeaaeeeeneaas 152 Add user tra group orr erare ir enean d eae aapna ae aein id eaa Akis 152 Bel
109. er lt Back n gt Cancel Screenshot 70 ISA Server check parameters dialog The parameters required are 1 Specify the ISA Server version installed on the target computer e 2000 Enable this option if your target computer has ISA server 2000 installed e 2004 Enable this option if your target computer has ISA server 2004 installed 2 Enable Integrated Firewall or Cache option to specify the operation mode of the ISA Server installed on the target computer NOTE If the ISA Server operation mode is set to Cache the Firewall services will not be monitored during this check Generic Exchange Server check NOTE This monitor function requires WMI to be installed on the computer running GFI Network Server Monitor as well as on the computer being monitored The monitor function will create a VBscript which uses WMI with the parameters you specify in the check parameters dialog GFI Network Server Monitor can monitor the status of Exchange services and performance counters running on a target computer Supported performance counters include Information Store performance counters Mailboxes performance counters Public folders performance counters and SMTP service performance counters Alerts and actions can be triggered whenever the performance of Exchange services runs low GFI Network Server Monitor Configuring monitor functions e 77 New Check Exchange Server Check the status of the Exc
110. er s Check that the x processor time x used by the process explorer fis smaller than x 20 G NOTE When specifying the process to monitor DO NOT include the process extension e g instead of explorer exe enter explorer Click Here to load a sample lt Back Next gt Cancel Screenshot 56 Process Properties check parameters dialog The parameters required for this function include e Check that the Select the system resource that will be checked from the dropdown list e Used by the process Specify the name of the process to be checked e Operand Select the operand and specify the value to be compared with the result Windows operating system checks Event Log NOTE This monitor function requires WMI to be installed on the computer running GFI Network Server Monitor as well as on the computer being monitored The monitor function will create a VBscript which uses WMI with the parameters you specify in the check parameters dialog WMI is only available on Windows 2000 and higher computers so this monitor function can only be used if both the GFI Network Server Monitor computer and the computer to be monitored are running Windows 2000 or higher GFI Network Server Monitor can read Windows Event logs on local or remote computers and can search their contents for specific Event Sources Categories Event ID s etc GFI Network Server Monitor Configuring monitor functions
111. ervice properties Name ftestservice State fls Running si G To access service properties Start gt Settings gt Control Panel gt Administrative Tools gt Services Double click on the service you want to monitor lt Back Next gt Cancel Screenshot 60 Services check parameters dialog A Service monitor function requires the following parameters e With internal name Enable this option to check for services having an internal identification name identical to the string specified in the NAME field The Internal identification is the Service Name displayed in the General dialog of the service properties e With display name Enable this option to check for services having a display name identical to the string specified in the NAME field The display name can be seen in the General dialog of the service properties NOTE To view the internal and display name of a service 1 Go on Start gt Programs gt Administrative Tools gt Services 2 Double click on the service to open the properties dialog The Service and Display names are shown in the general dialog DNS Server Properties Local Computer 2 x General Log On Recovery Dependencies Service name DNS Display name DNS Server CR ee Enables DNS clients to resolve DNS names by a Descipiion answering DNS queries and dynamic DNS update Screenshot 61 DNS Server Service and display name GFI Network
112. es a handshake connection to the remote POPS port and through the replies received it can verify if the remote servers POP3 protocol is working properly This check can also be configured to physically log on to a specific mailbox and check for the number of emails present in a folder within the accessed mailbox This will verify that the POP3 service is indeed running accessible and delivering the required service to end users The POP3 check also supports logon to the POP3 mailbox using SSL Through SSL you can secure the transmission session by electronically authenticating each end of an encrypted transmission New Check POP3 Mailserver Mailbox Check Check that the POP3 Server is running on the target computer s Can also X be used to check the number of emails in a mail box Specify the settings which will be used to establish a connection to the POP3 server Port fh 10 Timeout 7000 milliseconds I Requires an encrypted connection SSL Mailbox accessibility After successful connection to the POP3 server check the mailbox accessibility JV Perform server authentication Specify mailbox logon credentials in the next dialog JV Mail count in folder less than Re if 0 E Click here to load a sample lt Back n gt Cancel Screenshot 40 POP3 server check parameters dialog The POP3 Mailserver check requires the following parameters e Port Specify the TCP port to be used when connecting
113. esseaaeeseneeseas 105 Global alerting options 107 INTOGUCHION Astaire a aS tive eth a aoe aoe 107 MailServer seinge irar needs eit ste a eae edie nena elie 107 Adding a Mail Server siiri ipene e i a ia E eei aaa 108 Edit existing mail server details ec ececeeeeeeeeeeeeeeeeeeeeeeeaeeeeeeaaeeeeeeaeeeeseaas 110 Global settings for network Alerts c ccceccceceeeeeeeeeceeeeeeeeeeeeaeseeneeseeeeesaeeseaeseneeeteas 111 Global settings for SMS pager alerts 20 2 2 ececccceeeeseeceeeeeceeeeeeaeeeeeeeseeeesaeeesaeeeeeeeeaas 112 In built GSM SMS Serve ccccccccceceecceceeeeeeaeeeeeaeeeeeeeceaeeeeaaeseeeeeseeeesaeeeeaaesseneeesaees 113 GFI FAXmaker SMS service provider template cccccceeeeeseeeeeeeeseeeeesteeeeeeeeeaes 116 Clickatell Email2SMS Service ccccccceceecceeeeeeeeeeeceeeeeceaeeeeaaeeeeneeseeeesaeeseaeeeeeeeeaas 118 Generic SMS service provider template cccccceeceeceeeceeeeeeeeeeeeeeeeseaeeeeaeeeneeeteas 121 NSM 5 x 6 0 SMS Server system ccccceceeeeseeceeeeeceeeeeeaeeeeaaeseeeeeseaeeesaeeseaeseeeeeeaas 124 Additional nOteS ii sicst acti a R baie tries eet etal 129 Message template ccceeesseeceeeeeeneeeeseeeeeeeeeeeeeeeeaeeeeeeeaaeeesseaaeeeeeeaaeeeseeseneeseeseneees 130 General options 133 VEO O DTE 13 ATEENA FE EENIA TTET TE IOE EEES A TE EET acer cates 133 Uncertain Results settings 2 00 ccceeeeceeeeeeeeeeeeeeeeeeeeeeeeeeeseaeeeeeseaeeeeeseneeeeeseneeeeesn
114. et USES aiae r A ET E I 153 C1010 o EEE EA A E A E AAT 153 Adada new grOUD kesekn E E E TT 153 Add members to an existing group ssssssssssssssssrrsssrnssrinnnstinnnstennnsrnnnnstnnnnt 154 Remove members from a group sssssssssssrresssrresssnnesrnnnesrnnneetnnnennnnetnnnnennnnenn 154 Delete a QrOuUps eoria EARE A 154 Reporting 155 Mrodu ch Seona A E AA E A ees 155 Availability Detail Repo sssesinsnranei amarani A 155 Availability Summary RePOMt cccccceeeeeceeeeeeeaeeeeeee cents seaeeesaaeseeeeeeeaeeesaaeeeeaeeeeeeeess 158 Network tools 160 GFI Network Server Monitor Contents e iii Enumerate COMpUters ccecccccecescccceeeeeceeeeeeeceeeeseeaeeesaeeaeeesaaaaeaeseeeaeeeeneeaeeeseseaeenenes 160 Enumerate ProC SSes ccccescccceceeccceeeeeeceeeeeeeceeesaaeaeeeesseaaaesaaeaeeeseeaaeaeeneeaeensneeaeentes 161 EYNSJOOKU Ps desctsesend ts ees sdddeaeceeaeaes bag taken tacndsl ce tubapeaaatbesuedacvrevin fends t devae ETE 163 WROIS AEE ETA PRLE EATE E TEEN AE TETEE T EE EA T EST ETE 164 Trace OUE a ai araka AT RTARTA ERE ORRERI AARTE E E RARA AAEE RREAN 165 FEINT mire TOTO li ATE E EEE A EET ESE TE T E E ETTE 166 SNMP Walk ssecadisecunsoxe ted danaren adeeanddetber an ioaad naa di paeadur aasde ne Ea dapan d Sna End 167 Other features 169 Export CONFIQUIATIONS nacca e aa e A r S ER 169 IMPOrt CONFIQUIATIONS naa r a A EE a A AANA 170 Version INFOrmation nese aa aea E a T E a EA a A aE 171 LIGOMISIING erur ia N EE E E
115. f network printers connected to Linux Unix based target computers e Process running function Checks if a specified process is running on Linux Unix based target computers e Users and Groups Membership function Monitors user groups on Linux Unix based target computers against unauthorized users e Disk Partition Check Checks the state of mounted drives on Linux Unix based target computers e Disk space function Checks and restricts the available hard disk space on Linux Unix based target computers e Daemons function Checks the state of a particular daemon on target computers running a Linux Unix OS Take corrective action automatically When an important event e g check failure occurs GFI Network Server Monitor can attempt to correct a problem by restarting a failed service reboot a target computer server or launch an executable batch or VBScript file Monitor processes services amp CPU usage GFI Network Server Monitor enables you to check for critical processes and services running on local and remote computers You can also monitor the CPU usage of a computer to ensure that applications are running properly Build custom network monitor checks using scripts Although GFI Network Server Monitor includes an extensive set of default monitoring functions you can build your own custom checks using a scripting language such as VBscript or shell scripts for Unix environments SSH Secure Shell is used
116. fic time interval for example antivirus alerts posted in the last 30 minutes GFI Network Server Monitor Introduction e 2 Support for nested folders Nested folders folders contained within other folders are available in the Enterprise Consultant editions of GFI Network Server Monitor Through nested folders you can organize monitoring checks into a hierarchical structure that reflects specialized monitoring network needs e g grouping of monitoring checks by zone companies being served or check type grouping Support for SQL Server database backend Out of the box the Consultants Enterprise editions of GFI Network Server Monitor can store monitoring data in MS Access as well as in an SQL Server MSDE database backend This new SQL Server support allows you to efficiently monitor and collect network status data from environments which generate large volumes of monitoring data These include large networks as well as mission critical systems You can configure which database backend to use both during installation and after i e from the configuration module Built in checks for computers running Windows OS e Generic VB Script Enables you to customize build monitoring checks using your own VBscript functions e OS Object performance counter Determines the performance of applications by checking the properties of OS objects on target computers e Command Line executable output Executes command line applications
117. for remote connections to GFI Network Server Monitor Introduction e 5 Unix based computers In VBscript you can make use of WMI and ADSI WMI is an interface to a broad range of hardware software OS related properties of a computer allowing you to perform almost any check Using ADSI you can interface to Active Directory GFI Network Server Monitor includes a library of sample scripts and others are continuously being added to the GFI website Monitor users groups amp other Active Directory information Use GFI Network Server Monitor to monitor directory information For example monitor group membership of the domain admins group You can also check user accounts locked out disabled etc computer accounts groups group membership organizational units and so on A subset of NTDS NT4 based SAM account database can be queried too Additional Network Support Tools Additional Network support tools have been included in GFI Network Server Monitor to help you troubleshoot your network These tools include e Enumerate Computers function Searches your network for a list of domains workgroups and constituent computers e Enumerate Processes function Searches for processes running on local or remote computers e DNS Lookup function Resolves Domain Names to their corresponding IP address e Whois function Looks for information related to a specified domain or IP address e Traceroute function Shows th
118. g Sharing Security Add Administrators TESTADY Administrators R 8 Authenticated Users __ Remove fi CREATOR OWNER gi Server Operators TESTADY Server Oper fi SYSTEM Permissions Allow Deny Full Control Modify Read amp Execute List Folder Contents Read Write Advanced Vv Allow inheritable permissions from parent to propagate to this object Cancel Apply mjsjsjnjnjn OOOOOO Screenshot 127 Setting permissions 7 Add remove the users groups you want to grant access to the Remote Monitor To grant access only to users forming part of the administrators group you would set the security tab Click on OK to finally secure the remote monitor Proxy Server settings The proxy server settings define which server will be used for Internet protocol checks GFI Network Server Monitor General options e 141 General Options xi Uncertain Results Web Server Proxy Server Logging gt a Specify which proxy server to use for internet protocol based checks Hostname IP ISASERVER ss Port eos0 JV Proxy requires authentication User name ason Password Ba Screenshot 128 Proxy Server Setup Window To configure proxy server parameters 1 Right Click on the General Options node and select Properties 2 Click on the Proxy Server Tab and define the following parameters e Hostname IP Address Specify the proxy server name e g ISASERVER
119. g Whois Zg Traceroute Zg SNMP Audit Ze SNMP Walk E G General HS Records results Screenshot 150 DNS Lookup setup Window To obtain information about a domain name 1 Go to the Tools gt DNS lookup node 2 Specify the hostname to resolve 3 Specify the information to be retrieved e Basic Information i e host name and what IP this resolves e Host Information known technically as the HINFO usually includes information such as hardware and what OS runs on the specified domain most DNS entries do not contain this information for security reasons e Aliases return information on any A Records the Domain might have e MX Records known also as Mail exchangers records show which mail server s in order are responsible for this domain e NS Records indicate which name servers are responsible for this domain In addition it is possible to specify alternative DNS servers Whois This tool looks up information on a domain or IP address You can select a specific Whois Server from the options area or you can use the Default option which will select a server for you GFI Network Server Monitor Network tools e 164 a Starting WholS operation for gfi com ESSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSESSSSSLSSSss PI GFI Network Server Monitor 7 0 Whois Server Version 1 3 Gy ABC LTO Domajn names in the com and net domains can now be registered TMJASON hany differen
120. g check has recovered from the Failed state since GFI Network Server Monitor can recover a server device it can be useful to send an alert to the operator to inform him her that the previous error is no longer present About email alerts To use SMTP email alerts the GFI Network Server Monitor service must have access to an SMTP compliant mail server GFI Network Server Monitor also supports SMTP servers that require SMTP authentication such as the Microsoft Exchange llS SMTP server SMTP AUTH is a protocol that is used to verify that you are a user on the SMTP server GFI Network Server Monitor is RFC 821 and RFC 822 SMTP AUTH compliant NOTE GFI Network Server Monitor does not require IIS to support e mail it communicates directly to the SMTP server using the SMTP protocol About network alerts GFI Network Server Monitor makes use of Net Send or Net Popup to send messages over the network NOTE Only computers that support NetBIOS can send and receive network messages NetBIOS messages can be sent to users and or computers About SMS pager alerts GFI Network Server Monitor can send SMS messages through an SMS Center via an attached modem directly through an attached GFI Network Server Monitor Configuring GFI Network Server Monitor e 29 GSM device e g cell phone or via a web based SMS gateway When an SMS alert is to be sent through an SMS Center GFI Network Server Monitor uses the modem to d
121. get computer s S Check that the Drive ae on the target computers does not use more than the following hard disk space has at least the following free hard disk space 1024 MB m G Click here to load a sample lt Back n gt Cancel Screenshot 59 Disk space check parameters dialog A Disk Space function requires the following parameters e Check that the Drive Select the disk drive to be checked e Does not use more than the following hard disk space Enable this option and specify the maximum disk space that can be used The monitoring check will fail if the specified disk limit is exceeded e Has at least the following free hard disk space Enable this option and specify the minimum amount of free disk space required on the target computer The monitoring check will fail when disk space is below the specified minimum value Services GFI Network Server Monitor can monitor services on local and remote computers by checking if their status equals to Running GFI Network Server Monitor Configuring monitor functions e 67 New Check Services Check if services are running on a target computer s Check that service with internal name internal identification of the service Displayed in the Service Name field located in the General tab of the service properties with display name Displayed in the Display Name field located in the General tab of the s
122. gher computers therefore this monitor function can only be used if both the GFI Network Server Monitor computer and the computer to be monitored are running Windows 2000 or higher GFI Network Server Monitor checks groups and group memberships for unexpected unauthorised members which could make your system vulnerable to attacks e g intruders in the Domain Admins group GFI Network Server Monitor Configuring monitor functions e 75 New Check Users and Groups Membership Check group membership on a target computer s Specify the authorized members of a group Domain GFIMALTA Group NSMAdministrators Allowed members Jason AndreM separated by commas G Only the names in the Allowed members list are supposed to be members of the group If other users are found in the group the check will fail Use this check to be alerted if your network was compromised and an intruder adds himself to an administrative group WARNING This check is based on a script which requires WMI and ADSI Active Directory Service Interface on both this computer and the target computer s lt Back n gt Cancel Screenshot 69 Users and Groups check parameters dialog The User and Groups membership function requires the following parameters e Domain Specify the name of the domain in which the group is present e g GFIMALTA e Group Specify the name of the group to be checked e g Domain Admi
123. ghted Specify the percentage CPU usage value to be used as reference 3 Set the refresh rate at which the list will be updated 4 Specify logon authentication details if any 5 To highlight particular processes click on the Advanced tab and specify the process names one for each line The specified processes will be highlighted in yellow and displayed in the list 6 To hide any known processes from being displayed click on the Advanced tab and specify the process names in the Hide processes list one process per line 7 Click on Start to start enumerating processes Name PID CPU Usage Physical Mem Physical Virtual Mem a wmipryse 2436 0 1 85 Mb 0 36 3 94 Mb nsmreprt 5012 0 6 68 Mb 1 3 8 85 Mb mspaint 3320 0 20 23 Mb 3 95 30 11 Mb StatusClient 3992 0 1 86 Mb 0 36 1 11 Mb Photoshop 3352 0 98 95 Mb 19 33 168 06 Mb OUTLOOK 4384 0 12 71 Mb 2 48 12 13 Mb A nsmui 1624 13 45 38 62 Mb 7 54 43 81 Mb alg 2424 0 0 14 Mb 0 03 1 06 Mb cisvc 1532 0 0 33 Mb 0 06 4 15Mb javaw 196 0 6 12 Mb 1 2 19 38 Mb cstss 640 0 1 56 Mb 0 31 1 92 Mb nsmwebsry 5536 0 0 83 Mb 0 16 7 69 Mb KWSProd 4020 0 2 Mb 0 39 3 72 Mb wuauclt 368 0 0 55 Mb 0 11 4 36 Mb Isass 720 0 2 51 Mb 0 49 3 96 Mb PureText 2588 0 0 21 Mb 0 04 0 52 Mb svchost 184 0 0 09 Mb 0 02 2 32 Mb nsm_attendant 4188 0 2 49 Mb 0 49 12 41 Mb System 4 0 0 04 Mb 0 01 OMb wdfmar 26
124. gon credentials section in the Configuring GFI Network Server Monitor chapter Linux Unix Operating System Checks File existence Check GFI Network Server Monitor can search for specific files in a target computer running on Linux or Unix e g you can use this check to look for scheduled batch job results If the file exists you will receive a confirmation stating that the scheduled batch jobs have been executed You can also search the contents of an existing file for a specified string e g searching for fail or failed strings in the results file of scheduled batch jobs can help you define if all jobs were successful New Check File Existence Check the existence of the file and or search for patterns strings in the file SS itself Check that the file etc passwd does not exist exists P Eile must contain the following string not case sensitive een G Click fiere to load a sample lt Back Next gt Cancel Screenshot 80 File Existence check parameters dialog A File Existence function requires the following parameters e File UNC Path Specify the complete path to the file e g etc password GFI Network Server Monitor Configuring monitor functions e 85 e Does not exist Enable this option to check for file existence only In this case the check fails if the specified file is found e Exists Enable this option to check for file existen
125. hange services and the most important performance counters This check is used to monitor the status of the Exchange services and related important performance counter on the target computer s Specify which Microsoft exchange server version is installed on the target computer s Exchange 2000 Exchange 2003 G WARNING This check is based on a script which requires WMI to be installed on both this computer and the target computer lt Back E E Cancel Screenshot 71 Exchange server check parameters dialog The Exchange server check requires the following parameters 1 Specify the MS Exchange Server version installed on the target computer s e Exchange 2000 Enable this option if the target computer is running Exchange server 2000 e Exchange 2003 Enable this option if the target computer is running Exchange server 2003 Generic MS SQL ADO check GFI Network Server Monitor uses ADO ActiveX Data Object to check for the availability of Microsoft SQL databases It provides a DSN less connection to a variety of databases like MS SQL and MS Access GFI Network Server Monitor Configuring monitor functions e 78 New Check MS SQL 7 ADO Uses ADO to check availability of Microsoft SQL databases SS Connect to the target MS SGL ADO Database using the following Connection String Provider SQLOLEDB 1 Persist Security Info False User ID sa Initial Catalog databasel Data Source sql
126. he Edit script button WMI Windows Management Instrumentation If you plan to write monitor functions based on WMI Windows Management Instrumentation be sure you have WMI installed on the GFI Network Server Monitor server and on the target computer server that you want to monitor WMI is by default included as part of the Windows 2000 2003 operating system only For NT4 systems download the file for free from the Microsoft website GFI has collected more than a hundred WMI samples You can use these samples as a base for new monitor functions that you write yourself You can find them on the GFI website ADSI Active Directory Service Interfaces GFI Network Server Monitor can check several Directory Services including Active Directory and NTDS NT4 SAM database directory services You can program GFI Network Server Monitor to check user accounts locked out disabled etc computer accounts groups group membership organizational units and so on If you plan to write monitor functions based on ADSI Active Directory Service Interfaces be sure you have ADSI installed on the GFI Network Server Monitor server and on the server that you want to monitor ADSI allows you to access Windows 2000 2003 Active Directory but also NT4 User information from the SAM database and other User Databases ADSI is part of the Windows 2000 operating system and it s not part of NT4 For NT4 please download the file from the M
127. he Check properties dialog gt Logon Credentials tab SMTP Mailserver check GFI Network Server Monitor can check the availability of SMTP mail servers The SMTP Mailserver check initiates a handshake connection to the remote SMTP port and through the replies received it can verify if the remote server s SMTP protocol is working properly This check can also be configured to physically log on to the server where applicable and gain access to the SMTP service Once logon is authorized the SMTP check can also send a physical test email to a target email address This will verify that the SMTP service is indeed running accessible and delivering the required service to end users The SMTP check also supports logon to the SMTP server using SSL Through SSL you can secure the transmission session by electronically authenticating each end of an encrypted transmission GFI Network Server Monitor Configuring monitor functions e 47 New Check SMTP Mailserver Check Checks that the SMTP server running on the target computer s accept outgoing email requests Specify the settings that will be used to establish a connection to the SMTP server Pott 25 Timeout 10000 milliseconds J Requires an encrypted connection SSL Server functionality After successful connection to the SMTP server check the server s functionality JV Perform server authentication Specify mailbox logon credentials in the next dialog JV Send an em
128. he character that will be used to separate the fields in the log file e g using the comma would enable you to import the file to excel as CSV e Maximum log size Specify the maximum log file size in KB required e g if a 1 MB log file limit is required specify 1000KB e Backup the existing log file and clear it Enable this option to automatically make a copy of the log file and clear the contents of the original log file whenever the specified file size limit is reached NOTE In such cases the backup file name to be used would be LOG H HH TXT where is the next available number depending on the number backup files that already exist e g if LOGO002 TXT exist the next backup file number will be LOGO003 TXT e Do not log events until event log is cleared manually Enable this option to stop logging check activity whenever the maximum specified log file size is reached GFI Network Server Monitor General options e 143 Database maintenance options Introduction File Tools Help e gt A Tools Explorer GFI Network Server Monitor Monitoring Checks Configuration BGFi E GFIMALTA E TMJASON To modify the alerting options click on Properties ag A Properties ai p Modify the alerting options Monitoring Checks Status E g Program Configuration B NSM Users and Groups Q Users amp Groups Alerting Options General Options Sy Database Options Screenshot
129. hers For further information on parent folders please refer to the Check folders chapter in this manual How to set a folder to inherit properties from a parent folder For a folder to inherit properties from a parent folder select the Inherit O from parent folder option present in the check properties that can be inherited To inherit the alert settings from a parent folder 1 Configure the alert parameters on the folder For more information refer to the Check folders chapter in this manual 2 Select the monitoring check s that will inherit the alert parameters Right click on the selection and choose Properties TIP You can select and set up multiple checks simultaneously by holding down the CTRL or SHIFT button on the keyboard and selecting the required checks Properties TMJASON File Existence file oNSMINSTALLDIR 0 Order txt xi General Check Parameters Logon credentials Actions Dependencies Maintenance Actions PM inherit alert parameters from the parent folder Specify the alert parameters to use on the occurrence of important events during the monitoring of this chect Run external file x fF JV Inherit run external file parameters from parent folder Specify the run extemal file parameters to use on the occurrence of important events during the monitoring of this check Settings Reboot Computer Restart Services T JV Inherit reboo
130. hrsOmin Ohrsomin proda et ao be o N S S 6 0 attendant service 0 00 0 00 0 00 0 00 1 08 98 92 0 00 0 00 0 00 ANDREM GFI Anard CNSO OHS A min hrs min Nhrenmin Nhrenmin Shrs14 753hrs19 OhrsO E Done g My Computer Server Down Uncertain N S M 6 0 attendant service 0 00 0 00 0 00 0 00 NLS M 6 0 engine service k T E ES ANDREM GFI LANguard OhrsOmin 0hrs 0 min 0 hrs 0 min 0 hrs 0 min Screenshot 145 The availability summary report GFI Network Server Monitor Reporting e 159 Network tools Enumerate computers This tool searches for domains and or workgroups on your network Once the domains are defined you can scan their contents to catalog the constituent computers and their relative details e g OS other information from NETBIOS Computers can be enumerated from e The Active Directory Fast method which will also enumerate computers that are currently switched off e The Windows Explorer interface This method is slower and will not enumerate computers that are switched off NOTE When performing scans you must use access accounts that have rights over the Active Directory HGFI Network Server Monitor 7 0 Beles File Tools Help es Mmm Pk eee ene omata 7 Retieve GFI Network Server Monitor Monitoring Checks Configuratie Computer Operating system T
131. ial in to the SMSC provider and deliver the actual SMS message s most countries have one or more SMSC service providers When an SMS alert is to be sent via a web based SMS gateway GFI Network Server Monitor generates an email containing all the alert details This email is then sent to the web based SMS gateway where it is converted to an SMS and forwarded to the intended recipient Configure alert parameters xi General Check Parameters Logon credentials Actions Dependencies Maintenance Properties TMJASON File Existence file oNSMINSTALLDIR 0 Order txt Actions Specify the alert parameters to use on the occurence of important events during the monitoring of this check Run external file JV Inherit run external file parameters from parent folder y the run extemal file parameters to use on the occurrence of important events during the monitoring of this check Settings Reboot Computer Restart Services T JV Inherit reboot computer services parameters from parent folder Specify the reboot computer restart se occurrence of important events during the monitoring of this check Settings Cancel Apply Screenshot 24 Actions dialog with Inherit options enabled 1 Right click on the check to be configured and select Properties By default the check properties dialog will open in the General tab 2 Click on the Actions tab
132. icrosoft website ADSI is available for free GFI includes a sample script that uses ADSI called ads vbs In addition GFI provides some sample ADSI scripts on the website You can use these samples as a base for new monitor functions that use ADSI GFI Network Server Monitor Writing your own monitoring functions e 176 Troubleshooting Introduction The troubleshooting chapter explains how you should go about resolving any software issues that you might encounter The main sources of information available to users are e The manual most issues can be solved by reading this manual e GFI Knowledge Base articles e Web forum e Contacting the GFI Technical Support Knowledge Base GFI maintains a Knowledge Base which includes answers to the most common problems If you have a problem please consult the Knowledge Base first The Knowledge Base always has the most up to date listing of technical support questions and patches To access the Knowledge Base visit http kbase gfi com Web Forum User to user technical support is available via the web forum The forum can be found at http forums qfi com Request technical support If you have referred to this manual and our Knowledge Base articles and you still cannot solve issues with the software contact the GFI Technical Support team by filling in an online support request form or by phone e Online Fill out the support request form on http support gfi com suppo
133. il2SMS Service if no Internet connection is available or when your Internet connection is down Configuring the Clickatell Email2SMS Service To configure the Clickatell Email2SMS Service 1 Right Click on the Alerting Options node and select Properties 2 Click on the SMS tab and from the SMS System dropdown select Clickatell Email2SMS Service 3 Double click on the property which you want to configure e g SMTP server and specify the relative parameters in the Edit Property dialog NOTE When configuring properties always specify the details supplied to you by Clickatell If configuration parameters are not available ask Clickatell to provide you with the required information Global alerting options e 119 The Clickatell Email2SMS Service requires the following parameters e SMTP server Specify the name of the SMTP server through which GFI Network Server Monitor will send the email to the SMS gateway e SMTP port Specify the SMTP port through which the transmission will take place By default this parameter is set to 25 i e default SMTP port e From Specify the account from where the email will be sent For example you can specify the email address used by GFI Network Server Monitor for generic alerts e To Specify the email address of the Clickatell SMS gateway i e the address where GFI Network Server Monitor will send emails for conversion to SMS This address is provid
134. in the name of the required folder To locate only those folder names which match exactly the specified criteria select the option Match Whole Word 3 Click on Find Next to start the search The Find Folder tool will identify and highlight every occurrence matching the specified string Keep clicking on Find Next until you locate the required folder 4 To stop the search click on Close GFI Network Server Monitor Check folders e 98 Monitoring checks status Introduction You can view the current state of monitoring checks in three ways 1 From the GFI Network Server Monitor configuration by clicking on the Monitoring Check Status node For more information refer to the Viewing the state of checks from the GFI N S M configuration section in this chapter 2 From a dedicated application called GFI N S M 7 Activity Monitor This application is automatically installed with GFI Network Server Monitor and can be launched by going on Start gt Programs gt GFI Network Server Monitor 7 gt GFI N S M 7 Activity Monitor For more information refer to the Viewing the state of checks from the GFI NSM Activity Monitor section in this chapter 3 From your Internet Explorer through the remote web monitor included in GFI Network Server Monitor For more information refer to the Viewing the state of checks remotely section in this chapter Viewing the state of checks from the GFI N S M
135. ing properly it does so by sending a physical email through a target SMTP server and checking for the arrival of the test email in a mailbox on a target POPS Server New Check Email Route Check Ensures that the email is working properly by sending an email through an S SMTP Server and verifies that it arrives to the destination POP3 mailbox Send email to Jiason afi com Configure Through the SMTP Server ZCHECK_TARGET Configure Check that the email arrives to destination through the following POP3 IMAP Server ZCHECK_TARGET Configure Check email delivery every fad seconds Fail if email is not delivered within 5 minutes IV Delete sent email once delivery is confirmed E Click here to load a sample lt Back n Cancel Screenshot 46 Email Route check dialog To configure the Email Route check you must specify GFI Network Server Monitor Configuring monitor functions e 53 e The sender s and recipient s email address For more information on how to configure these parameters refer to the Configuring the sender s and recipient s email address section e The SMTP server through which the test email will be sent i e the SMTP server to be checked For more information on how to configure these parameters refer to the Configuring the SMTP Server details section below e The POP3 IMAP server through which the test email will be delivered i e the POP3 IMAP se
136. ing the alert details e g email address SMS Pager number etc the person s working hours and the groups in which this user is a member To configure these parameters 1 Click on the General tab which is the default opening view of the user properties dialog 2 Specify the following properties e Full name Specify the full name of the user e Description Specify a string which describes the user s role in the company e g Mail server administrator e Email Specify if required the address were email alerts will be sent e Mobile Number Specify if required the mobile number were SMS alerts will be sent GFI Network Server Monitor Users and Groups e 150 e SMS Pager number Specify if required the Pager number were SMS messages will be sent e Network Messages Specify if required all the computers to which network messages will be sent To add a computer to the list type the computer name in the provided field and then click on the Add button Repeat the same operation until all computers have been specified Define working hours GFI Network Server Monitor allows you to specify the working hours of a user recipient of alerts These parameters will be referenced by the GFI Network Server Monitor engine in order to decide what alerts if any need to be sent to this user depending on the time during or outside of working hours that an important event occurs e g a check fails
137. ion of GFI N S M right click on the General Licensing node and select Enter license key NOTE Your present configuration makes use of nested folders which is an Enterprise Consultant Edition only feature Screenshot 159 Licensing details To check your licensing details click on Licensing in the General node GFI Network Server Monitor Other features e 172 Writing your own monitoring functions Introduction NOTE GFI Support cannot assist you in the writing and debugging of custom scripts You must be familiar with VBscript to write your own functions and you must debug them yourself GFI Network Server Monitor is designed to let operators write their own monitor functions and use them in the product GFI uses VBScript because it is the most popular scripting language in Windows environments GFI Network Server Monitor uses VBscript itself to perform a number of checks In fact during installation five VBScript files are installed e ads vobs includes monitor functions based on ADSI Active Directory Service Interfaces e exchange vobs includes monitor functions that can check Exchange 2000 2003 servers e hardware vbs includes hardware related monitor functions e os vbs includes Operating System related monitor functions e sample vbs includes some sample functions Writing a script function GFI Network Server Monitor functions should always return e 1 True Re
138. is automatically refreshed at timed intervals you can refresh the displayed information by right clicking on the page and selecting Refresh GFI Network Server Monitor Monitoring checks status e 101 Viewing the state of checks from the GFI N S M Activity Monitor GFI Network Server Monitor ships with an Activity Monitor which enables you to view the status of the monitoring engine and monitoring checks This activity monitor is automatically installed with GFI Network Server Monitor and thus it can only be used from the computer where this software is installed To launch the Activity Monitor go on Start gt Programs gt GFI Network Server Monitor 7 gt GFI N S M 7 Activity Monitor E GFI N 5 M Monitor oix Engine Status Monitoring Checks Status Type Description 4 26 07 2005 17 08 46 Information E mail notification successfully sent recipients jason ogfimalta com subject ISASERVER DNS Server x 26 07 2005 17 08 44 Error ISASERVER DNS Server query www google com result 209 217 53 213 DNS server was queried re A 26 07 2005 17 06 38 Warning ISASERVER DNS Server query www google com result 209 217 53 213 DNS server was queried re A 26 07 2005 17 04 28 Warning ISASERVER DNS Server query www google com result 209 217 53 213 DNS server was queried re A 26 07 2005 17 04 08 Warming ANDREM GFI LANguard N S M 6 0 engine service Unable to query service state service GFI NSM
139. isk Space can no longer be accessed then the check status is set to uncertain because GFI Network Server Monitor engine can no longer determine the disk space GFI Network Server Monitor General options e 133 General Options xi Uncertain Results Web Server Proxy Server Logging Specify how NSM is to handle uncertain results One of the result values of a monitoring check is Processing Error Processing Error means the engine is not able to determine whether the specific result should be Success or Error Taking the Disk space monitoring check as an example when the specific server is not available at all the engine cannot say anything at all about the available disk space Both Success and Error would be misleading Therefore Processing Error will be returned If you want you can configure to consider all Processing Error values as either Error or Success Consider undetermined result as Processing Error default Consider undetermined result as Error Consider undetermined result as Screenshot 119 Uncertain Results setup GFI Network Server Monitor can be configured to convert uncertain results to a definite state i e Success or Error To specify how GFI Network Server Monitor will handle uncertain results 1 Right Click on the General Options node and select Properties By default the properties dialog wi
140. itored Check cannot be processed by the GFI Network Server Monitor engine This occurs when the monitoring service is stopped or when a check requires a particular service e g the SNMP or WMI service which is not available on the target computer Server in Maintenance Check has been executed against a target computer during its maintenance hours When this happens no actions are triggered E g no alerts are sent e O Failure by Dependee The check was not executed because a dependency check has already failed e g if the router cannot be pinged do not check that services running on that router are working Pending failure Check has failed but did not exceed the error threshold level required to move a check from the Pending Failure state to the Failed state GFI Network Server Monitor Monitoring checks status e 105 e Uncertain Processing Error Indicates that the result of a monitoring check cannot be clearly determined i e cannot be directly classified as Success or Failure For example the engine tries to run a disk space monitoring check against a target computer which is switched off GFI Network Server Monitor is not able to determine the available disk space due to a situation outside the context of that check Other situations which can cause an uncertain result are timeouts over a slow network or firewall blocking the communication between GFI Network Server Monitor and the target com
141. l fail since it will not know which target to query e Port Specify the TCP port through which the connection will be established The SMTP Port is by default set to 25 e Timeout Specify the connection timeout value This value defines the time interval required for a connection to take place If the connection is not established within the specified time period a timed out will occur and an error is generated By default this value is set to 3000 milliseconds e This server requires an encrypted connection SSL Select this option if you want to encrypted the transmission i e establish a secure session by electronically authenticating each end of an encrypted transmission GFI Network Server Monitor Configuring monitor functions e 56 e Outgoing server SMTP requires authentication Select this option if your SMTP server requires authentication before the transmission takes place In addition you must state the alternative credentials that this check will use by selecting one of the following options e Use credentials set in the folder check Select this option to use the authentication details specified in the check properties gt Logon Credentials tab e Use the following credentials Select this option to specify the additional credentials to be used for authentication i e User name and password NOTE The New Check Wizard automatically prompts you to configure alternative credentials during th
142. ld can be used to monitor the response time of a computer Click here to load a sample lt Back ne gt Cancel Screenshot 44 ICMP Ping check parameters dialog The ICMP Ping function requires the following parameters e Make sure you ping the target computer Select Can to specify that the check is successful if the server replies to the ping Select Cannot to specify that the check fails if the server replies to the ping e Number of Echo requests to send Specify the number of pings to be sent e Minimum number of expected replies Specify the minimum number of replies that must be received for the check to be successful e Timeout m sec for each reply Specify the expected response time in milliseconds This is the time that the check will wait for a response to an echo request i e the time between successive echo requests GFI Network Server Monitor Configuring monitor functions e 51 Generic TCP IP check GFI Network Server Monitor can check local or remote server connections by challenging a specific port The challenge will involve connecting to the target computer sending it a sequence of bytes and analyzing the information received New Check TCP IP Check local or remote servers by challenging a specific port Open a connection to the target computer s on port jeo I Send command when connected Bi Timeout 7000 milliseconds G In
143. list has highest priority and is the first one to be used To change the priority of a selected server click on Move Up or Move Down accordingly Adding a Mail server 1 Right click on the Alerting Options node and select Properties The alerting properties will open by default in the Email Alerts configuration dialog i e Email tab GFI Network Server Monitor Global alerting options e 108 Mailserver Properties Xx Mailserver E Specify the mail server settings to use when sending email alerts Hostname IP MAILSERVER Port 5 V This SMTP server requires authentication Username JAMIN Password eee Specify the Sender details for emails sent through this server Sender e mail NSMAdmin afi com Sender Display Name NSM Administratod Send a test message Screenshot 103 Mail server propertiesdialog 2 Click on Add and specify the following parameters in the Mail server properties dialog e Hostname IP Specify the Hostname e g Mailserver or IP address e g 192 168 1 200 of the Mail server to be used e Port Specify the TCP communication port to be used for the transmission This parameter is set by default to SMTP port 25 e This SMTP server requires authentication Select this option if your SMTP server requires authentication to send email messages Specify the logon credentials in the provided fields e Sender email Specify the email account
144. ll open in the Uncertain Results tab options 2 Determine uncertain results by e Enabling f result cannot be determined consider result as Uncertain default to leave uncertain results unhandled I e Enabling If result cannot be determined consider result as Error to handle uncertain results as failed e Enabling f result cannot be determined consider result as Success to handle uncertain results succeeded In this case the same conditions specified on the successful execution of a check will apply Web Server settings You can use the GFI Network Server Monitor built in web server to remotely view the status of your network GFI Network Server Monitor General options e 134 General Options xi Uncertain Results Web Server Proxy Server Logging G Configure the in built web server for remote monitoring IV Enable in built web server on port 11695 Allow anonymous access to the web server Add Edit fi Remove Screenshot 120 built in Web Server settings To configure the built in web server 1 Right Click on the General Options node select Properties and click on the Web Server tab 2 Configure the following parameters e Enable in built web server on port Enable this flag and specify the port which the built in web server will listen on by default set to 11695 e Allow anonymous access to the web
145. llation phase There is no way to change the service credentials from the GFI Network Server Monitor configuration application The only way to change such details is as follows 1 Start gt Settings gt Control Panel gt Administrative Tools gt Services 2 Double click on GFI Network Server Monitor 7 0 engine 3 Click on the Log On tab and make the required changes 4 Click on OK to exit GFI Network Server Monitor Installing GFI Network Server Monitor e 15 Configuring GFI Network Server Monitor Getting started with GFI Network Server Monitor NOTE All configuration settings for GFI Network Server Monitor are carried out from GFI Network Server Monitor configuration Launch this configuration program from Start gt GFI Network Server Monitor program group gt GFI Network Server Monitor configuration Introduction to monitor checks Monitoring checks are tests which verify the condition of specified computers and services on your network These tests check e Hardware status i e verify that target computers and related hardware components are available and running e g Printer availability and Physical disks availability check e Applications and Services i e verify that specific services and applications are running on target computers e g Generic Exchange Server Check and DNS Server checks In GFI Network Server Monitor you can create single checks as well as batches of checks using the availa
146. low a check to fail 3 consecutive times before the check is classified as failed and alerts etc are triggered NOTE Check failures occurring within the specified error threshold limit are known as errors GFI Network Server Monitor only defines a check as failed when the number of errors exceeds the error threshold The error threshold is necessary to avoid continuous false alarms triggered by check timeouts associated with slow network GFI Network Server Monitor Configuring GFI Network Server Monitor e 25 connections or delays in connection in extremely busy targets e g File servers and Mail servers during peak hours Configure check functional parameters The check functional parameters are the test settings that define the role of a monitoring check i e each type of monitoring check requires its own configuration settings and parameters For further information on functional parameter setups please refer to the Configuring monitor functions chapter in this manual Example Configuring the functional parameters of a File Existence check GFI Network Server Monitor can check for the existence of a file In this example the monitoring check will be setup to look for a file called status txt New Check File Existence Check that the file exists and optionally check if it contains a particular text Check that the file UNC path 2NSMINSTALLDIR Order txt fe does not exist exists JV
147. ls are required to access the target site e Check for availability only Enable this option to check ONLY for the availability of a target site e Check availability Enable this flag to check the availability of a target site as well as to search its contents for a specific string e Contains the following text Enable this flag and specify the string to be searched for in the contents of the target site If no match is found the check will be classified as failed e Does not contain the following string Enable this flag and specify the string to be searched for in the contents of the target site If no match is found then the check is classified as successful e Use http web site authentication Enable this flag if the HTTP target site requires authentication This option will use the authentication details specified in the logon credentials of the check properties GFI Network Server Monitor Configuring monitor functions e 42 e Use proxy server Enable this flag if the target web site is to be accessed through the Proxy server FTP GFI Network Server Monitor can check the availability of FTP sites through specified ports New Check FTP Check the availability of FTP sites SS URL ftp ftp gfi com NOTE The credentials to be used are specified in the next dialog J Use proxy server a Use a URL string like domainname com 8080 to connect to a port other than the default
148. lt lt CHECK_RESULT gt Explanation lt CHECK_EXPLANATION gt Message from GFI Network Server Monitor lt DATE gt lt TIME gt NOTE Using new lines in SMS Pager Message Templates is NOT recommended Most GSM phones don t know how to handle new lines and will display bad characters GFI Network Server Monitor Global alerting options e 131 General options Introduction File Tools Help e gt m a Tools Explorer fal GFI Network Server Monitor a Monitoring Checks Configuration BGFi E GFIMALTA E TMJASON To modify the alerting options click on Properties a JASON Properties 545 Modify the alerting options Monitoring Checks Status E g Program Configuration SS NSM Users and Groups Q Users D Groups Alerting Options S General Options Es Database Options Screenshot 118 General Options node From the General Options node you can e Specify how GFI Network Server Monitor will handle uncertain results e Configure GFI Network Server Monitor built in Web server e Specify which proxy server will be used for Internet Protocol based checks e Enable the event logging activity Uncertain Results settings An uncertain result occurs when the result of a check cannot be determined as successful or failed by the GFI Network Server Monitor engine because of the condition encountered e g If the target computer on which a monitor function checks D
149. meters from Parent folder option is selected unselect it and specify the operational maintenance periods for the target computer being monitored e g The screenshot above shows the maintenance schedule setup for a target computer which is down between 21 00 and 23 00 hrs all week for data backups and between 8 00 and 12 00 hrs every Saturday for hardware and software maintenance NOTE Marked time intervals indicate operational times during which the monitoring check can be run 3 Click on Apply to accept the current configuration TIP 1 To mark unmark a whole day click on the name of the day e g Monday at the left of the hours grid on display TIP 2 To mark the same hour for a whole week click on at the top of the column representing the required hour Inheriting check properties About property inheritance In GFI Network Server Monitor a parent folder is a folder which contains monitoring checks Parent folders have properties identical to GFI Network Server Monitor Configuring GFI Network Server Monitor e 37 those configured in monitoring checks In fact such folder properties can be configured and then passed on to any all checks contained in the folder i e they can b inherited All properties except for the Check details and Check functional Parameters can be inherited from a parent folder These include Scan Frequency Logon credentials Alerts and Maintenance parameters among ot
150. n Wizard 5 Right click on the newly created virtual directory located under the web root of your web site server and select Properties GFI Network Server Monitor General options e 137 nsmremotemonitor Properties 2 x Virtual Directory Documents Directory Security HTTP Headers Custom Errors When connecting to this resource the content should come from A directory located on this computer C A share located on another computer A redirection to a URL Local Path C Program Files GFI Network Server Monil Browse Script source access IV Log visits MV Read IV Index this resource Write Directory browsing Application Settings Application name Default Application Create Configuration Starting point lt Default Web Site gt Execute Permissions None Application Protection Medium Pooled Unigad Cancel Apply Help Screenshot 124 Setting Virtual Directory properties 6 In the Virtual Directory tab of the properties dialog mark the Read the Log Visits and the Index this resource check boxes 7 Click on OK to close the properties dialog The Virtual Directory has been set up and you can now test access to it Securing the Remote Monitor It is important to set up proper authentication and security for this web server and virtual directory There are three ways to secure the Remote Monitor These are Basic
151. n existing group 1 Double click on the Group folder under the Users and Groups node right click on the group were the new member will be added and select Properties 2 Click on the Add button select the new members and click on OK to accept the selection Remove members from a group 1 Double click on the Group folder under the Users and Groups node right click on the group were the new member will be added and select Properties 2 Select members to be deleted from displayed list and click on Remove Delete a group Double click on the Group folder under the Users and Groups node right click on the group to be deleted and select Delete GFI Network Server Monitor Users and Groups e 154 Reporting Introduction Out of the box GFI Network Server Monitor includes a dedicated reporting tool This tool allows you to create reports that detail the availability of your network resources You can create reports directly in HTML or generate XML CSV reports that you can export to your favorite application You can use the report templates included in GFI Network Server Monitor to extract monitor data from the database backend and generate detailed or summary reports based on a particular period of time Availability Detail Report The Availability Detail Report includes an overview of all changes in check state that occurred across a specified period of time Other details
152. n make changes to alternative credentials from the Check properties dialog gt Logon Credentials tab GFI Network Server Monitor Configuring monitor functions e 48 NTP Time Server availability Most of organizations use a time server to ensure accurate time settings The NTP protocol is the protocol used to synchronize times between workstations servers and external time sources GFI Network Server Monitor uses NTP to check the availability of internal and external time sources New Check NTP Timeserver Check the availability of NTP time servers SS This check only requires the name of the target computer s Click Next to proceed lt Back n Cancel Screenshot 42 NTP Time server check parameters dialog The NTP function requires NO parameters DNS server check The DNS server check can read a specific record type on a DNS server and then compare it to a specified expected result value In addition you can also specify how this check will interpret the result after comparing the value returned by the DNS server to the parameter specified in the Record values field For example this check can read the A record address record from the DNS server and verify if it includes the IP address specified in the expected result field i e Record values field GFI Network Server Monitor Configuring monitor functions e 49 New Check DNS Server Check DNS Server entries on a t
153. neric ISA Server check Monitors the status of ISA Server services e Generic Exchange Server check Monitors the status of Exchange services and important performance counters e Generic MS SQL ADO check Monitors the status of MS SQL databases using ADO Built in checks for databases e ODBC function Checks the availability of a database using ODBC Built in checks for network Internet protocols and services e HTTP function Checks the availability of HTTP and Https sites e FTP function Checks the availability of an FTP server site e IMAP function Checks the availability of IMAP mail servers by remotely connecting to the IMAP port It can also optionally check mailbox authentication as well as count the number of emails in a specific mail folder e NNTP news server function Checks the availability of NNTP news services e POP3 server function Checks POPS servers by establishing a connection doing a handshake and optionally authenticate and check the inbox mail count e SMTP server function Monitors mail servers by establishing a connection and doing a handshake in order to check if the SMTP protocol is working correctly The SMTP check also allows mailbox authentication as well as sending of test emails e Terminal services Port check Checks if the terminal port is open on local and remote servers e NTP timeserver function Monitors the status of timeservers e DNS server function
154. nning on the target server s EGF LANguard S E LM B GFI LANguard N S S E GFI LANguard P S C E GFI LANguard N S M P GFI Web Monitor O A GFI FAXmaker O E GFI Mai ssentials O E GFI MailSecurity GFI Mail rchiver O S Symantec O Norton Antivirus 2005 O M Noman O I Norman Virus Control v5 O Mi Kaspersky Lab O Mi Kaspersky Anti Virus for Windows File lt Back Next gt Cancel Fee Screenshot 12 Specify additional applications that require monitoring GFI Network Server Monitor Configuring GFI Network Server Monitor e 18 4 Select any additional important service applications installed on the target computer s Quick Start Wizard Step 4 5 Specify the server s names Specify for which computers the monitoring checks will be created TEST_S erver_3 Add TMJason TEST Server_1 Remove Select Wid Import C The checks will be created in this folder lt Root Folder Click here to select a different folder recipient lt Back Next gt Cancel Screenshot 13 Select target computers 5 Specify the target computer s on your network which fit the options you selected operating system roles applications Click on next to continue TIP Use the Select button to choose from a list of computers detected to be running on your network TIP Use the Import button to load the list of target computer name s from a text file
155. ns e 139 Authentication Methods xi Anonymous Access No user name password required to access this resource Account used for anonymous access Edit m Authenticated access For the following authentication methods user name and password are required when anonymous access is disabled or access is restricted using NTFS access control lists V Basic authentication password is sent in clear text Select a default domain Edit Digest authentication for Windows domain servers Integrated Windows authentication Cancel Help Screenshot 126 Select authentication method If Integrated Windows authentication is used then authentication will occur against Active Directory This means you do not need to configure additional users If you use Basic Authentication authentication will occur against the local user database on the computer In this case you must create user names and passwords on that local computer For more information on securing IIS please review the IIS documentation Be sure not to allow anonymous access 6 Restrict the access to the pages by using NTFS permissions Open up Explorer and navigate to the web folder in the GFI Network Server Monitor installation path Right click on the web sub folder select Properties and then the Security tab GFI Network Server Monitor General options e 140 web Properties 2 x General Web Sharin
156. ns group e Allowed members Specify the name of the members that are allowed in this group Separate each member by commas e g JasonM NickG AndreM Windows applications checks Generic ISA Server check NOTE This monitor function requires WMI to be installed on the computer running GFI Network Server Monitor as well as on the computer being monitored The monitor function will create a VBscript which uses WMI with the parameters you specify in the check parameters dialog WMI is only available on Windows 2000 and higher computers therefore this monitor function can only be used if both the GFI Network Server Monitor computer and the computer to be monitored are running Windows 2000 or higher GFI Network Server Monitor can monitor the status of ISA Services on target computers GFI Network Server Monitor Configuring monitor functions e 76 New Check ISA Server Monitors the status of the ISA server services This check is used to monitor the status of the ISA Server services on the target computers Specify the version of the ISA Server installed on the target computer s 2000 2004 Specify the operational mode of the ISA Server installed on the target computer s C Integrated Firewall Cache G If the ISA Server mode is set to Cache the Firewall service will not be monitored WARNING This check is based on a script which requires WMI to be installed on both this computer and the target comput
157. nshot 121 Specifying an alias for the virtual directory 2 This will start the Virtual Directory Creation Wizard Click on Next to continue Now you need to enter an alias for the virtual directory In this case it is nsmremotemonitor but you can enter whatever name you like as long as it follows the folder naming conventions used in Microsoft Windows irtual Directory Creation Wizard Xx Web Site Content Directory Where is the content you want to publish on the Web site Enter the path to the directory that contains the content Directory C Program Files GFI Network Server Monitor Server web Browse lt Back Cancel Screenshot 122 Pointing to the GFI NSM web folder GFI Network Server Monitor General options e 136 3 Now enter the path where the content is located Select Browse and select the server web folder in the GFI Network Server Monitor installation path irtual Directory Creation Wizard Access Permissions What access permissions do you want to set for this virtual directory Allow the following M Read Run scripts such as ASP 7 Execute such as ISAPI applications or CGI Write Browse Click Next to complete the wizard Screenshot 123 Setting permissions 4 Next we need to set the access permissions Mark Read only Do not mark any of the other check boxes Click on Next to finish the Virtual Directory Creatio
158. nshot 156 Import configuration settings 2 Specify the complete path to the XML file containing the configuration settings e g NSM_Server2 Program Files GFl config_Backup xml or click on Browse to search for the file 3 Click on OK to import the specified configuration file GFI Network Server Monitor Other features e 170 Version information FE GFI Network Server Monitor 7 0 BEE File Tools Help e gt Tools Explorer q Monitoring Checks Status SECURITY amp MESSAGING SOFTWARE s Py i B Program Configuration TA E Users and Groups Version Information Q Users a Groups GFI Network Server Monitor 7 0 i Alerting Options carl amp General Options opyright Cc 2000 2005 GFI Software Ltd 4 Database Maintenance Opti Version 7 0 a Tools Build 20051007 Ze Enumerate Computers Zg Enumerate Processes E 3 7 z Ze DNS Lookup Hol To helena newer builds of GFI N S M right click on General Version Information and select Check or newer Build Ze Whois Ze Traceroute Ze SNMP Audit Ze SNMP Walk ED General G3 Version Information B Licensing How to purchase Support Center Knowledge Base GFI LANguard N S 5 GFI LANguard P S C GFI LANguard S E L M GFI Network Server Monitor Screenshot 157 Version Information Check the version of GFI Network Server Monitor from General node gt Version Information ersion Information Properties xi
159. nsidered to be available GFI Network Server Monitor Configuring monitor functions e 89 New Check Process Running Check that a process is running on a target computers Check that the following process is running E Uses a Linux shell script via SSH to determine whether the specified process is tunning Click fierg to load a sample lt Back Next gt Cancel Screenshot 85 Running Process check parameters dialog A process check requires the following parameter e Process Specify the name of the process to be monitored e g init Users and groups membership Check GFI Network Server Monitor inspects groups and group membership against intruders which could pose a vulnerability threat to your network system e g Intruders in Domain Administrators group can give themselves administrative rights GFI Network Server Monitor Configuring monitor functions e 90 New Check Users and Groups Membership Check group membership on a target computer s 9 Specify the authorized members of a group Group NSMAdmin_Grp Allowed members JasonM AndreM separated by commas E Only the names in the Allowed members list are supposed to be members of the group If other users are found in the group the check will fail Use this check to be alerted if your network was compromised and an intruder adds himself to an administrative group This check uses a Linux shell script vi
160. nt Obtain this value from your SMS service provider e Protocol Choose between TAP Telecator Alphanumeric Protocol and UCP Universal Computer Protocol Although TAP is the most commonly used protocol you should ask your SMS service provider for this information GFI Network Server Monitor Global alerting options e 128 e Password You can specify a password to use for authentication before connecting to the provider e Comments Add any comment related to the provider e g For support call provider on 22211164 5 Click on OK to add the service provider to the list Changing SMSC providers details NSM5 SMS System xi Provider Dial amp Modem Properties Specify the details for sending SMS alerts through TAP UCP compilant SMS Service Center Selected SMSC provider Test_Provider Providers list Cellone USA MetroCall Edt USA Mobile Comm USA Mobile Media Delete USA NexTell USA NexTel2 USA PageM art USA PageNet USA SkyTel USA SkyTel USA Sprint PCS USA USA Mobile USA VYoiceStream Test_Provider Cancel Screenshot 116 SMSC providers list NOTE This section is only applicable for advanced users We cannot guarantee that GFI Network Server Monitor will work with any SMS provider Ensure that you obtain the correct information from your SMS service provider first To change the provider s details 1 Right click on the Alerting Options nod
161. nt ID Specify an event ID GFI Network Server Monitor will filter events that match the specified ID i e filter events by ID e Event Type Enable the event types that will be filtered and checked from the event logs i e filter events by type e g enable Warning to check and filter warning logs only e Event Source Specify event sources that must be filtered from the logs i e filter events by source e Event Category Specify event categories that must be filtered from the log i e filter events by category e User Specify the name of the user whose events are to be filtered i e filter events by user GFI Network Server Monitor Configuring monitor functions e 65 e Description contains string Specify the string to search for in the file contents i e filter event by content string e Check only events which happened in the last x minutes Specify this value to filter events occurring during the specified period of time i e filter events by time of occurrence NOTE Use wildcard to indicate all any criteria File Existence GFI Network Server Monitor can check for the existence of a particular file on a target computer as well as search its contents for particular strings This is particularly convenient when checking for results of scheduled batch jobs and other logging information New Check File Existence Check that the file exists and optionally check if it contains a par
162. o be sent e g 4 e Minimum number of expected replies Specify the minimum number of replies that must be received in order for the check to succeed e g 4 e Timeout m sec for each reply Specify the expected response time in milliseconds This is the time that the check will wait for a response to an echo request i e the time between successive echo requests NOTE On a congested network echo response packets may take longer than 3 seconds to be delivered To avoid false alarms adjust the timeout value according to the traffic present on your network GFI Network Server Monitor Configuring GFI Network Server Monitor e 21 New Check Select computers Specify for which computers this monitoring check will be created Specify for which computers this monitoring check will be created ISASERVER Remove Select Wud Import JV Greate the checks in a dedicated folder for every computer Recommended C The checks will be created in this folder lt Root Folder gt Click here to select a different folder recipient lt Back Next gt Cancel Screenshot 16 The Select Computer s dialog 4 Select the target computer s to ping TIP 1 You can also enumerate target computers by clicking on Select This will open a dialog from where you can choose the required target computer s TIP 2 You can import the list of target computers from a text file using the Impor
163. o inform the recipient s of the event s e Run an external file Launch an executable batch or VBScript file when a particular check fails e Rebooting a computer Attempt to automatically correct a problem by rebooting the target computer which has failed e Restarting services Attempt to automatically correct a problem by restarting the service s which have failed during a check Alerts GFI Network Server Monitor supports email alerts network alerts and SMS pager alerts GFI Network Server Monitor Configuring GFI Network Server Monitor e 28 Settings Alerts xi E J When the check fails _ Send an email to NSMAdministrators Send a network message to NSMAdministrators Send a SMS message to NSMAdministrators NOTE Double click on alert type to specify recipients Send failure alerts Only once after the failure C Once every fi minutes as long as the check continues failing When the check recovers from a failed state O Send an email to lt No Recipients Configured gt O Send a network message to lt No Recipients Configured gt O Send a SMS message to lt No Recipients Configured gt NOTE Double click on alert type to specify recipients Cancel Screenshot 23 Alerts Setup Dialog These alerts can be sent in two situations e When a monitoring check fails after a configurable number of errors the monitor check is considered as failed e When a monitorin
164. o use another file altogether GFI Network Server Monitor Network tools e 166 E GFI Network Server Monitor 7 0 Fie Joos Help e am Tools Explorer g GFI Network Server Moritoe 3 Monitoring Checks Configuration Qj ABCLTD IP of computer running SNMP 172 16130 125 omputer Name 172 16 130 128 cheistopher gfimaka com E TMJASON 0 DEF LTD x2 110 Morwtorng Checks Status GB Progam Configuration amp Users and Groups Q General Options es Database Mantenance Options H Tools Ze Enumerate Compiters Enumerate Processes Ze DNS Lookup 4 Whois Traceroute Ze SNMP Audit Ze SNMP Walk 4D General gt SNMP Audit tool configuration and results interface The list of strings included in the default dictionary file Screenshot 153 The SNMP Audit tool 1 Specify the following parameters IP Address The IP address of the computer running SNMP e String List The list of strings parameters to be checked can be left as default This property is by default set to the dictionary file included in GFI Network Server Monitor This dictionary file called snmp pass txt contains the list of strings which forms the query data fields to be displayed in the result window being the window on the right of the SNMP Audit setup window Should more less information be required user can either edit the mentioned default file or create a new one using a text editor e Resolve computer names
165. odem properties to be used to connect to j the provider Set the properties with which dialling to the selected provider will be made Tone Pulse Tone bd Dial prefix Set the configuration options so as to be able to communicate with the modem COM pot c0oM1 Flow contro Hardware JV Software Initialization string G Initialization string can contain multiple AT commands which can be separated with the use of the semicolon Screenshot 114 Dial amp Modem properties tab 5 Click on the Dial and Modem Properties tab and specify the following parameters e Tone Pulse Select the type of dialing that your modem will use i e tone or pulse e Dial prefix Specify any additional numbers that need to be dialed before the dial string NOTE The dial string is the number of the selected provider and can only be modified by editing the SMSC provider s details For further information please refer to the Changing SMSC providers details section in this chapter e COM Port Select the com port where the modem is connected e Flow Control Leave as default e Initialization String f required specify any AT Commands that you wish to send to your modem NOTE The initialization string is a set of modem AT commands combined into one string e g AT amp F amp C1 amp D2 For a complete list of AT commands visit http esvc001164 wic013u server web com modems mo
166. of the checks specified in the dependency list must be successful before this check is allowed to execute 3 Click on Add Then choose the checks to be included in the dependencies list and click on Select Select Monitoring Check s xi Select monitoring checks Monitoring Check Name Monitoring Check Container a i Jason Server Service ABC Ltd zi jason afi com Email Route ABC Ltd zi HTTP HTTPS www gfi com ABC Ltd Yj JASON GFI LANguard N S M 6 0 attendant OS and Services Checks i JASON GFI L Nguard N S M 6 0 engine se OS and Services Checks zi JASON Kaspersky Anti Virus for Windows wW OS and Services Checks Dj JASON Event Log Service OS and Services Checks SON ICMP Ping OS and Services Checks Yj Jason Event Log Service OS and Services Checks jason afi com Email Route OS and Services Checks Jason GFI MailEssentials Attendant GFI Applications zi Jason GFI POP2E xchange GFI Applications Zi Jason GFI List Server GFI Applications i Jason GFI FAXmaker Health Check GFI Applications at ofl Cancel Screenshot 31 List of available checks TIP Multiple check selections are possible by holding down the CTRL or SHIFT keyboard buttons 4 Click on Apply to accept the current configuration Define maintenance schedules Maintenance parameters define the times during which monitoring check s are not executed i e during
167. onnection Pooling About Add System Data Sources SADSN System nalyzer MySQL Driver CRORS8V36 CR Oracle8 v3 6 Remove CRSS SQL Server CRXMLY36 CR XML v3 6 Configure Northwind _Lonfigue Microsoft Access Driver mdb the indicated data provider A System data source is visible to all users An ODBC System data source stores information about how to connect to on this machine including NT services Cancel Apply Help Screenshot 73 ODBC administrator with sample database configured A system DSN entry is setup as follows 1 Go to Administrative tools gt Data Sources ODBC to launch the ODBC administrator 2 Click on the System DSN tab then click on Add NOTE It is important that you select System DSN and not User DSN otherwise the service will not have access to the data source database Data Source Name IN orthwind OK Description fT est Database Cancel Database Database C 4 YB98 NWIND MDB Help f Create Repair Compact a i vanced System Database None Database System Database Options gt gt Screenshot 74 ODBC setup with sample database GFI Network Server Monitor Configuring monitor functions e 80 3 Select a database driver suitable for the database you wish to monitor e g for an MS Access database choose Microsoft Access Driver mdb 4 In the ODBC setup dialog specify a data
168. or IP address e Port Specify the port on which the proxy server will listen default 8080 e Proxy requires authentication Enable this flag to indicate that the specified proxy server requires authentication details e User name Password Specify the logon detail to be passed to the specified proxy server for authentication Log file settings GFI Network Server Monitor can log monitoring checks activity into a text file for future reference Since the log file is in plain text you can import its contents to other applications for further processing GFI Network Server Monitor General options e 142 General Options xi Uncertain Results Web Server Proxy Server Logging 13 Specify whether NSM should keep a log file of its activity J Enable logging of monitoring checks activity Log file c System Logs NSM_Logs ae Field separator Maximum log size 2000 KB When maximum log size is reached C Do not log events until NSM log is cleared manually Screenshot 129 Log file setup Window To configure the logging parameters 1 Right Click on the General Options node and select Properties 2 Click on the Logging tab and define the following parameters e Enable Logging of monitoring checks activity Enable this flag to start logging all check activity to a specified text file e Log file Specify the full path to the log file e Field separator Specify t
169. or more information about writing scripts please refer to the Writing your own monitoring functions chapter New Check VBScript Use your own function in Bscript as a monitoring check Script location Ic Program Files GFI Network Server Monitor 6 0Script El VB Function to execute GetCpul sage VB Function parameters Double click on the parameter line to specify a value for it Parameter Value Description l B1 CHECK_TAR Pass on Target Computer Name 2 CPUO Pass on CPU number e350 Usage Threshold value D4 5 DE Edit script G IMPORTANT String parameter values must be enclosed into double quotes lt Back n gt Cancel Screenshot 51 VBscript check parameters dialog A VBScript function requires the following parameters e Script location Specify the path to the required VBScript file The script should contain the function specified in the Function name field and should return True 1 in case of success or False 0 in case of an error e Function name Specify the function that GFI Network Server Monitor service will be calling from the specified script file Edit Parameter xi Parameter value CHECK_TARGET gt Parameter description Target Computer Name E String parameter values must be enclosed into double quotes cancel Screenshot 52 Parameters dialog GFI Network Server Monitor Configuring monitor functions e 60
170. ored e g data sys_log e File size limit Specify the maximum size in KB MB or GB allowed for this file Printer availability Check GFI Network Server Monitor can check for the availability of network printers connected to target computers running on Linux Unix When a printer problem occurs alerts can be sent to the support personnel in order for them to take immediate action and get the printer back online or transfer print jobs to a different printer GFI Network Server Monitor Configuring monitor functions e 88 New Check Printer Availability Check whether a printer is configured on a target computer s Printer Display Name as displayed on the target computers no UNC DFX6000_onT MJason Gi Inthe Printer Display name field use the printer display name as defined on the remote computer s for instance HP LaserJet 5L Uses a Linux shell script via SSH to determine the printer availability lt Back n gt Cancel Screenshot 84 Printer check parameters dialog GFI Network Server Monitor uses a Linux shell script via SSH to determine printer availability A Printer Availability check requires the following parameters e Printer name Specify the name of the printer to be monitored Process Running Check GFI Network Server Monitor enables you to check processes on local and remote target computers running on Linux Unix If a process is active then the target computer is co
171. orking hours for a user please refer to the Working Hours section in this chapter NSMAdministrator Properties xi General Working hours Alerts Member or Ls Specify the types of notifications this user is to receive Specify the types of alerts this user should receive for events which happen during working hours or outside working hours Example configure the user to receive SMS alerts when outside of working hours only Events happening Events happening during working outside of working hours hours Email notifications IV Iv Network message alerts Iv Iv SMS alerts E i Screenshot 136 Alerts Setup Dialog Enable the alerts that will be used when alerts occur during and or outside of working hours e g The screenshot above shows the settings for a user that will receive email alerts at any time an important event occurs as well as a Network alert if the event occurs during working hours and an SMS Pager alert if the event occurs outside of working hours Add user to a group A user can be added to predefined groups You can create a group of users to notify more than 1 person and avoid having to specify multiple users for each check you create NOTE Users can be members of more than 1 group GFI Network Server Monitor Users and Groups e 152 NSMAdministrator Properties xi Member of 3 NSMAdministrators Add ee Ben neve Cancel Apply Screenshot 137 Members of tab To
172. ormat the message template used for email network and sms pager alerts Mail server settings GFI Network Server Monitor needs to know which mail server s can be used to send email alerts Although alerts can be sent through only one mail server you can specify alternative servers which can be used in the event of a mail server failure GFI Network Server Monitor Global alerting options e 107 Alerting Options Ea Email Network SMS j Specify the mail server settings to use when sending email alerts Specify one or more mail servers to use when sending email alerts in order of priority The alternative mail servers will only be used when mail servers with higher priority cannot be contacted or return errors MAILFAXSRY ofimalta com Move up BUP_MailServer1 gfimalta com BUP MailServer2 gfiusa com Old MailServer gfi com Moye down Add Remove Edit Format Email Message Cancel Apply Screenshot 102 Email Alerts configuration dialog By default the server at the top of the mail servers list has the highest priority and is used to send email alerts If this server is not available GFI Network Server Monitor automatically switches to the next mail server in the list This continues until an available mail server is found and the email alert is successfully sent NOTE Sort the mail servers list in ascending order of priority This means that the server at the top of the
173. ose properties propagate down to the checks contained in that folder Alerts administrators via email pager or SMS When it detects a failure GFI Network Server Monitor can send alerts via SMS pager email or a network message SMS messages are sent through either an SMS service provider SMSC directly through a connected GSM phone modem or using an Email to SMS service such as Clickatell GFI Network Server Monitor can also choose the type of alert to be sent depending on the time that an important event e g check failure occurs and in relation to the working hours specified for the intended recipients In built Exchange 2000 2003 monitoring Out of the box GFI Network Server Monitor checks the status of your Exchange Server by monitoring critical Exchange services and performance counters Information Store mailboxes SMTP service etc Monitor your database servers SQL ODBC GFI Network Server Monitor can check for the availability of database applications Out of the box it can monitor Microsoft SQL server via ADO Other databases such as Access FoxPro Paradox SyBase Informix IBM DB2 and many more can be monitored via ODBC Monitor remote Event Logs GFI Network Server Monitor can scan Windows Event logs on local or remote computers and look for specific Event Sources Categories and Event IDs as well as for patterns in the Description of the Event In addition it can look for multiple events occurring in a speci
174. oxy server parameters please refer to the Proxy Server settings section in the General Options chapter GFI Network Server Monitor Configuring monitor functions e 41 New Check HTTP HTTPs Check the availability of HTTP and HTTPs sites SS URL http s 7 www gfi com Use server verification https for this site Check for availability only Check that the page contains the following text does not contain the following text Network Server Monitor Use http web site authentication NOTE The credentials to be used are specified in the next dialog J Use proxy server G Use a URL string like domainname com 1010 to connect to a port other than the default port port 80 Click here to load a sample lt Back n gt Cancel Screenshot 36 HTTP HTTPS check parameters dialog Should the HTTP HTTPS site require authentication GFI Network Server Monitor will pass the username and password specified in the Logon Credentials of the monitoring check For more information on authentication details please refer to the Logon Credentials section in the Configuring GFI Network Server Monitor chapter An HTTP HTTPs function requires the following parameters e URL http s Specify the location of the HTTP HTTPS site in URL format i e http server port path format e Use server verification https for this site Enable this flag when logon credentia
175. ping Check Description Check availability of a target computer s Target g Inherit target computer from parent folder nd The monitoring check will apply to the following computer Hostname IP TMJASON Scan Frequency B I Inherit scanning frequency from parent folder Run the monitoring check once every 2 minutes minimum 5 seconds Error Threshold Inherit error threshold from parent folder Consider this monitoring check as a fail after E errors Screenshot 19 Check properties dialog To specify the general parameters of a monitor check e g Check Name and Target Computer 1 Right click on the check to be configured and select Properties By default the check properties dialog will open in the General tab 2 Specify the following parameters e Check details The monitoring check name e g Fileserver Availability Check and relative function description e g Ping the Fileserver to check if it is available e Target The name or IP address of the target computer on which this check will run e g FILESERVER or 192 168 1 10 e Scan Frequency The time interval between consecutive executions of this monitoring check e g Specify a scan frequency of 10 minutes if you want to run this check every 10 minutes e Error Threshold The number of consecutive times that this check must fail before an action is triggered e g Specify an Error Threshold of 3 to al
176. puter When such situations occur monitoring checks are placed in an uncertain state NOTE 1 When a check is in an uncertain state no actions are generated i e no alerts etc NOTE 2 Use the General Options gt Uncertain Results tab to configure GFI Network Server Monitor on how to treat uncertain results Checks in an uncertain state can be transformed into Success Failed checks state depending on your monitoring needs GFI Network Server Monitor Monitoring checks status e 106 Global alerting options Introduction File Tools Help e gt m a Tools Explorer g fal GFI Network Server Monitor a Monitoring Checks Configuration BGFi E GFIMALTA E TMJASON To modify the alerting options click on Properties a JASON Properties 545 Modify the alerting options Monitoring Checks Status g Program Configuration E NSM Users and Groups Q Users amp Groups Alerting Options s General Options Es Database Options Screenshot 101 Alerting Options node The Alerting Options node contains the general alerting parameters required by GFI Network Server Monitor for sending Email Network and SMS Pager alerts From this node you can e Specify which mail servers can be used to send email alerts In addition you can format and define the contents of the email message e Specify SMS Pager settings and format the message to be used when sending SMS Pager alerts e F
177. puter being checked option 4 To reboot a specific computer a Select the Reboot the following computer option b Specify the name or IP address of the computer which will be rebooted e g MAILSERVER 5 To restart the service s on a computer a Select the Restart the service s on the following computer option b Specify the name or IP address of the target computer on which the service s will be restarted c Specify the internal or display name e g DNS Client of the service to be restarted and click on Add Repeat this step for every service which needs to be restarted 6 Click on Apply to accept the current configuration GFI Network Server Monitor Configuring GFI Network Server Monitor e 34 Set up dependencies Dependencies are checks that define the availability of servers e g ISA Server or Proxy Server and services e g DNS Server or DNS Client required by a target computer i e on which a target computer is dependent The specified dependency check s must be successfully executed before the other monitoring checks can be run E g If you access the Internet through a Proxy Server an ICMP Ping dependency check can be set to check the availability of the Proxy Server before executing HTTP HTTPS monitoring checks If the dependency check fails the HTTP HTTPS check will not be run but will be classified as a Failure by Dependee For further information on check statu
178. r Summary Report Microsoft Internet Explorer D xi Ele Edt View Favorites Tools Help ay Q id A Alp ras O 2 a LG SD Address fe C Program Files GFI Network Server Monitor 6 5 Reporter nsm_report_200581173238 htm Ba Links Snagit ey SECURITY amp MESSAGING SOFTWAR GFiWERServerMonitor Availability Report Summary From 01 07 2005 to 01 08 2005 Depender Malntananco Depdender On unavailable maintenance hold monitored Chest OSD OhrsOmin OhrsOmin OhrsO min Ohrs 0 min ests Taabrs19 L3 ANDREM Disk Space C drive min min min min 0 00 0 00 0 00 0 00 0 00 0 00 4 08 98 92 Ohso Ohrs0 _ ghrs14 753hrs19 i 5 H OhrsOmin 0hrs 0min 0 hrs 0 min 0 hrs 0 min 5 fi ANDREM Event Log Service min min min min 0 00 0 00 9 00 0 00 0 00 0 00 408 98 92 ANDREM GFiContent CMSO ShSO OhsOmin OhrsOmin OhrsOmin OhrsOmin ie rn 19 ji min min Security Attendant 0 00 ooog 00 0 00 0 00 0 00 408 98 92 0 00 ANDREM GFIFAXmaker Ms ww n O OhsOmin OhrsOmin OhrsOmin Ohrsomin pat fens us ne s Health Check ooo cooo 00 0 00 0 00 oos anx 824 OA OhrsO OhrsO 8hrs14 753hrs19 OhrsO min min min min min 0 00 0 00 1 08 98 92 0 00 ANDREM GFI LANguard T ww m O OhsOmn OhsOmn OhsOmin OhrsOmn m S ae ier n m t 0 00 0 00 000 0 00 ee 0 00 4 08 98 92 0 00 ANDREM GFILANguard he oy a O OhsOmin OhrsOmin O
179. r Specify the email address where you wish to forward copies of the emails sent to the SMS gateway e Subject Optional parameter Specify the text which you want to include in the email s subject field e Body line 1 Specify the API ID which has been assigned to you by your SMS gateway provider This parameter is required by the SMS gateway for authentication purposes Format this parameter as follows api_id lt API ID No gt E g api_id 124576 NOTE If you don t know your API ID ask your SMS gateway provider to supply you with this information e Body line 2 Specify your SMS gateway user name e g user JasonM Format this entry as follows user lt user name gt NOTE If you don t know your SMS gateway user name ask your SMS gateway provider to supply you with this information e Body line 3 Specify your SMS gateway password e g password abcde Format this entry as follows password lt password text gt NOTE If you don t know your SMS gateway password ask your SMS gateway provider to provide this information e Body line 4 Leave as default This property contains the number of the SMS recipient i e the number where the SMS will be sent This value is automatically passed on by GFI Network Server Monitor through variable smsnumber which is substituted to text when the email is generated The contents of this property are formatted as follows to smsnumber e Body line 5 Leave as d
180. r can check the disk space used by a directory folder on target computers You can use this function to implement a disk control quota system which notifies you when a specific folder exceeds the maximum size specified GFI Network Server Monitor Configuring monitor functions e 69 New Check Folder Size Check disk space used by a folder on a target computer s S Check that the size of the folder including subfolders c Windows a does not exceed the following size 1024 KB be i You can use the check_target tag in the folder path Use this function to implement an effective but low cost quota system Click ferg to load a sample lt Back Next gt Cancel Screenshot 63 Directory Size check parameters dialog The Directory Size function requires the following parameters e Directory Name Specify the path to the folder directory in UNC format e g server01 public docs which needs to be monitored e Directory size limit Specify the maximum size in KB MB or GB allowed for this directory File Size GFI Network Server Monitor can check for the size of particular files on local and remote computers You can use this function to monitor the size of files e g Outlook pst files and generate alerts whenever these files reach or exceed the specified size GFI Network Server Monitor Configuring monitor functions e 70 New Check File Size Check the size of a file on a targe
181. r will receive the template emails to be converted to SMS i e Smsnumber smsmaker com This parameter includes variable smsnumber which is substituted to the number of the SMS recipient when the template email is generated For example if an SMS must be sent to a recipient with number 88885555 the email is sent on 8888555 smsmaker com GFI FAXmaker will then send the SMS on the number specified in the email address e Subject Optional parameter Specify the text which you want to include in the template email s subject field 4 In the Retries entry box specify the number of times that the FAXmaker SMS service will try to send an SMS alert should the first attempt fail 5 Click on OK to save your configuration settings Clickatell Email2SMS Service Pager GFI Network Server Monitor yale via ASN Ten p Email Laptop with Clickatell web based m e Gateway SMS gatews smsgpmessagng ctckaiell com M teway R spmessa eci ient ie sate neon TabletPC with 6 SMS Gateway Template Email GSM Cell Phone WS Smart or Q phone SMTP Mail Server Figure 4 SMS alert flow via a Clickatell Email to SMS service The Clickatell Email2SMS Service allows GFI Network Server Monitor to relay SMS text alerts via Clickatell a web based SMS service which sends SMS messages worldwide Whenever an event triggers an SMS alert GFI Network Server Monitor sends a template email via SMTP to Clickatell s SMS gatew
182. refer to the Message Template section in this chapter Message templates Alert messages templates can be customized by clicking on the Format Message button present in the Email Network and SMS Pager pages of the NSM Global Alerting options Message templates can be built up using text and variables Variables are substituted each time a message is sent out and must be enclosed within e g DATE when specified in message templates The following are variables that can be included in message templates e DATE date in mm dd yyyy format e TIME time in hh mm ss format e CHECK_NAME the display name of the check as seen in the configuration GFI Network Server Monitor Global alerting options e 130 e CHECK FOLDER the name of the folder in which the specific check is located e CHECK_TARGET the check s target computer name IP can be either the one set in the check or the one inherited from the parent folder e CHECK_RESULT the result of the monitoring of the check represented as a string e CHECK_EXPLANATION the explanation returned with the last known status of the check e CHECK_DESCRIPTION A description of the function carried out by the check e PRODUCTNAME the short product name of the product i e GFI N S M 6 0 Example of a message template Message from GFI Network Server Monitor lt DATE gt lt TIME gt Item lt CHECK_TARGET gt Resu
183. res the following parameters in the General tab view e Hostname P The name of the remote computer whose processes will be enumerated e Retrieve CPU usage per process Indicate that the process list should include the percentage CPU usage value e CPU usage Specify the maximum percentage CPU usage allowed This option will then highlight processes using more than the specified limit e Refresh list frequency Specify the time interval in seconds at which the list of processes will be refreshed e Logon Credentials Specify logon credentials if any required to connect to host computers The following parameters are required in the Advanced tab view e Highlight processes Specify the list of processes which you need to highlight in the derived list of processes This is convenient to find any known unwanted process such as viruses which are running on a remote computer or vice versa to confirm if a particular process such as a virus shield is running GFI Network Server Monitor Network tools e 162 e Hide Processes Specify the list of processes that you do not want to display in the derived list of processes To retrieve the list of running processes 1 Specify the name IP of the computer from where to retrieve the processes 2 Specify if you want to display the percentage CPU usage and indicate if processes using more than a specified CPU usage value are to be highli
184. rough GFI FAXmaker market leading fax server software that allows you to send and receive faxes via your email infrastructure GFI FAXmaker is also an SMS gateway which allows you to send SMS messages through e A GSM phone modem connected to your fax server Or e Web based SMS service providers For more information on GFI FAXmaker visit http www gfi com faxmaker Whenever an event triggers an SMS alert GFI Network Server Monitor sends a template email via SMTP to the fax server i e GFI FAXmaker This template email contains all the SMS alert details including the SMS text message and the recipient s number GFI FAXmaker then converts this email to SMS and sends it to the intended recipient GFI Network Server Monitor Global alerting options e 116 Alerting Options xi Email Network SMS Specify settings for available SMS systems through which SMS alerts will be sent Select SMS System Faxmaker SMS service provider template Set properties for the selected SMS system Property Value SMTP server mysmtpserver SMTP port 25 From myself mydomain com a To smsnumber smsmaker com Subject Alert Optional settings Edit Retries 3 time s Format SMS message Concel aoe Screenshot 109 FAXmaker SMS service configuration dialog Requirements In order to use the FAXmaker SMS service you must have 1 GFI FAXmaker installed and config
185. rs Screenshot 26 Configuring alert recipients 5 Double click on the users and or groups that must be added to the list of alert recipients When all the intended recipients have been selected click on the OK button NOTE 1 Alerts are sent using the delivery details email address etc specified in the properties of the selected users For more GFI Network Server Monitor Configuring GFI Network Server Monitor e 31 information on user properties please refer to the Configure user properties section in the Users and Groups chapter NOTE 2 Select the Once every minutes as long as the check continues failing option ONLY if this alert is to be sent more than once during the time that this check is in a failed state In this case specify the time interval in minutes required between each alert sent e g To send an alert every 10 minutes select this option and enter 10 in the time interval to make it read Once every 10 minutes as long as the check continues failing 6 Click on Apply to accept the current configuration Run an external file after an alert is triggered Settings Program Actions xi General Program Actions T Select which important events are of interest and which external files to run when they occur JV When the check fails execute the following list of files exe bat vbs Add c Emergency Stop_Activity exe CHECK_TARGET
186. rtrequestform asp Follow the instructions on this page closely to submit your support request e Phone To obtain the correct technical support phone number for your region please visit http Awww qgfi com company contact htm NOTE Before you contact our Technical Support team please have your Customer ID available Your Customer ID is the online account number that is assigned to you when you first register your license keys in our Customer Area at http customers qfi com We will answer your query within 24 hours or less depending on your time zone GFI Network Server Monitor Troubleshooting e 177 Build notifications We strongly suggest that you subscribe to our build notifications list This way you will be immediately notified about new product builds To subscribe to our build notifications visit http Avww gfi com pages productmailing htm 178 e Troubleshooting GFI Network Server Monitor Index A ADSI 6 173 176 Alerting Options 107 108 110 112 114 117 119 122 125 128 129 130 alerts 2 6 14 35 39 Alerts 28 29 Cc Check folders 38 95 checks status 99 configuration 15 27 28 32 33 34 36 37 CPU usage 3 5 D database backend 3 14 145 146 147 155 Dependencies 35 Directory size 3 5 Disk drive 3 Disk space 3 5 DNS server 4 50 E email 1 2 39 107 109 EMAIL 149 e mail alerts 28 29 Event ID 2 64 65 Event Log 65 Event Log function 3 Exchange 2
187. running NOTE The Export Configuration function will export all configuration settings present in the GFI Network Server Monitor setup EXCEPT THE LICENSE KEY To export your configuration settings 1 Go on File gt Export Configurations Export Configurations Ea Save exported file as C Program files Bak NSM_Conf_bak xml Browse Screenshot 155 Export Configuration settings 2 Specify the location where the exported XML file will be placed e g C Program Files GFl configBackup xml or click on Browse to search for the location 3 Click on OK to save the file GFI Network Server Monitor Other features e 169 Import configurations You can import all configuration settings except for the license key of another GFI Network Server Monitor setup e g from another server by using the Import configuration function This function conveniently avoids having to re configure the settings of GFI Network Server Monitor when you need to change the computer on which your current version of GFI Network Server Monitor is running NOTE Since importing a configuration will overwrite all your current configuration settings we strongly recommend that you export a copy of your current configuration settings and keep it as a backup 1 Go on File gt Import Configurations Import Configurations Ea Configuration file location c program files bak nsm_conf_bak xml Browse Scree
188. rver to be checked For more information on how to configure these parameters refer to the Configuring the POP3 IMAP Server details section below e The frequency at which this check will verify if the test email was delivered to the destination mailbox This means that if you set the check email delivery value to 30 seconds this check will access the destination mailbox two times per minute until the email is found or until the test email delivery is timed out NOTE You cannot configure a Check email delivery value which is greater than the specified timeout value e The test email delivery timeout value This is the time during which the check will verify if the test email was delivered to the destination mailbox In other words this is the time allocated for the test email to travel between the SMTP server and the destination mailbox If the email is not delivered to destination within the specified time a timeout occurs and the Email route check will fail e Optionally GFI Network Server Monitor can delete the test email once the delivery is confirmed To automatically delete the test email select the Delete sent email once delivery is confirmed option at the bottom of the Email Route check parameters dialog NOTE 1 The Email Route check is successful ONLY if the test email is present in the destination mailbox This means that on heavy traffic or slow networks you must configure enough delay between the sen
189. s NT authentication option NOTE If the specified server and credentials are correct GFI Network Server Monitor will log into the SQL Server and create the necessary database tables If the database tables already exist it will re use them 3 Click on OK to save your configuration settings GFI Network Server Monitor Database maintenance options e 147 Users and Groups Introduction GFI Network Server Monitor checks refer to the user s properties to gain alert details e g email address rather than directly to an email or a number This is in order to avoid having to change all the checks if a particular email or number of a user changes You can configure user name email address mobile number pager number and the computer name s from where network messages should be sent from the user properties You can also define the working hours of a user and decide what alert if any is to be sent depending on the time that the important event occurred i e during or outside of working hours You can create a group of users to notify more than 1 person and avoid having to specify multiple users for each check you create This makes it much easier to change the users to notify afterwards since you just need to change the group membership FE GFI Network Server Monitor 7 0 File Tools Help Tools Explorer Name sl GFI Network Server Monitor Q im E a Monitoring Checks Configuration C GFIMALTA E TMJASON E JASON B 54
190. s classification please refer to the Check State Indicators section in the Monitoring check status chapter TIP Use dependencies to avoid receiving a flood of alerts when servers on which other computers depend are down Properties TMJASON File Existence file Y oNSMINSTALLDIR o Order txt xi General Check Parameters Logon credentials Actions Dependencies Maintenance Dependencies 2 Inherit dependency checks from parent folder Cah Please configure the dependencies list of this check C Ensure one of the following checks succeed prior to running this check Check Name Folder Name ke TMJASON ICMP Ping can ping TMJASON Cancel Apply Screenshot 30 Dependencies Setup Dialog To setup Dependencies 1 Right click on the check to be configured and select Properties By default the check properties dialog will open in the General tab 2 Click on the Dependencies Tab If the Inherit dependency checks from Parent folder option is selected unselect it and choose one of the following dependency conditions e Select the Ensure all of the following checks succeed option to denote that ALL checks in the dependency list must be successful before this check is allowed to execute GFI Network Server Monitor Configuring GFI Network Server Monitor e 35 e Select the Ensure one of the following checks succeeds option to denote that at least one
191. s is done for the monitoring checks properties For the configuration instructions refer to the Configure monitor check properties section in the Configuring GFI Network Server Monitor chapter 4 Click on OK to save the configuration settings and exit the folder properties dialog Example Configuring the target computer parameter 1 Right click on the folder to be configured and select properties By default the check properties dialog will open up in the General tab 2 Specify the target computer name or IP address e g TMJASON or 192 168 1 100 in the Target section 3 Click on OK to accept the configuration settings and exit the folder properties dialog Configure properties of existing folders To configure properties of an existing folder right click on the folder and select Properties For other configuration instructions please refer to the Configure monitor check properties section in the Configuring GFI Network Server Monitor chapter Deleting folders To delete a particular folder right click on the folder name and select Delete NOTE Folder deletion cannot be undone We recommend that you back up your current GFI Network Server Monitor configuration before proceeding with the deletion of folders This will allow you to restore your previous configuration thus recovering deleted folders if needed To back up your current configuration go on File gt E
192. s option if you want the check to fail succeed based on the number of emails present in a folder on the IMAP server In addition you must specify the e IMAP folder name e g Inbox e Logical comparison operator Specify if the count should be equal to not equal to less than less than or equal to greater than greater than or equal to a specified value e The value i e the number of emails to which the retrieved count will be compared Configuring monitor functions e 44 NOTE When the Login to mailbox option is selected alternative credentials will be required so that this check can remotely log on to the mailbox on your IMAP server The New Check Wizard automatically prompts you to configure these alternative credentials i e the user name and password during the creation of this check After the check has been created you can make changes to alternative credentials from the Check properties dialog gt Logon Credentials tab NNTP news server availability GFI Network Server Monitor can check NNTP news servers by starting a handshake connection on the remote TCP port normally port 119 By handshaking GFI Network Server Monitor can verify that the remote server s NNTP protocol is online and functional New Check NNTP Newsserver Check NNTP news servers by establishing a connection on the remote TCP SS port Open a connection to the target computer s on port fi 1
193. s status home page GFI Network Server Monitor allows you to view the state of monitor checks directly from its configuration program To view this information Monitoring checks status e 99 click on the Monitor Checks Status node This by default opens the Status Monitor Home page in the events right hand side window The home page displays all Failed checks as well as the last 10 actions that GFI Network Server Monitor has performed The information on display also includes e The current state of the monitoring engine i e started or stopped The date and time when each check failed The reason for this failure e g if a required file is not found during a file existence check the reason displayed would be File does not exist The icon on the left hand side of listed checks indicates the relative check status For more information on these icons refer to the Check State Indicators section in this chapter The Status Monitor home page also includes a list of all the folders present in GFI Network Server Monitor This list is displayed at the bottom of the page PE GFI Network Server Monitor 7 0 BEES File Tools Help e gt am A Tools Explorer m EAEE B GFi SECURITY amp MESSAGING SOFTWARE 2 a Monitoring Checks Configuration z f ABC Ltd Home List of folders gt ABC Ltd E OS and Services Checks H E Application Checks Folder Contents ABC Ltd ISASERVER DEF Ltd
194. sed into double quotes lt Back n gt Cancel Screenshot 160 VBscript check parameters dialog 2 Select Generic VB Script and specify the following parameters e Script location Specify the path to the VBScript file which will be used The script should contain the function specified in the Function name field and should return True 1 in case of success or False 0 in case of an error e Function name Specify the function that GFI Network Server Monitor service will be calling from the specified script file e VB Function Parameters Double click on the line where the additional parameter values required by this function are to be specified NOTE Parameters will be passed to the function according to their position in the list starting from 1 Edit Parameter xi Parameter value CHECK_TARGET Parameter description Target Computer Name String parameter values must be enclosed into double quotes Cancel Screenshot 161 Add Parameters dialog e Specify the parameter value and description Parameter values can be extracted from system variables e g USERNAME GFI Network Server Monitor Writing your own monitoring functions e 175 upon execution of the function or directly specified as a string e g JasonM NOTE 1 Enclose string parameter values within quotes e g CPUO NOTE 2 You can make changes to the selected script by clicking on t
195. server When the connection is established perform the following query i from table The check requires the query to be successfully executed for it to succeed More information on connection strings can be obtained from http www connectionstrings com Click fere to load a sample lt Back Next gt Cancel Screenshot 72 MS SQL ADO check parameters dialog An MS SQL ADO function requires the following parameters e ADO Connection String Specify the ADO connection string which will be used to connect to the SQL Server Data source e Query Specify the SQL Query which will be triggered when connection is established NOTE For more information on SQL ADO connections strings please visit http www connectionstrings com Windows OS databases checks Generic ODBC GFI Network Server Monitor makes use of ODBC to check for the availability of a variety of databases Major database systems that support ODBC include Microsoft SQL Server Microsoft Access Microsoft Excel Oracle FoxPro Paradox SyBase Informix Openlngres InterBase Progress IBM LANDP DB2 and AS 400 NOTE To monitor a database via ODBC you must first setup a System DSN entry to the database you wish to monitor on the server running GFI Network Server Monitor GFI Network Server Monitor Configuring monitor functions e 79 ODBC Data Source Administrator 24 x UserDSN System DSN File DSN Drivers Tracing C
196. specify the group s to which this user will be added click on Add TIP You can make multiple selections of groups so as to add all required groups at one go Delete users To delete users 1 Click on the Users folder under the Users and Groups node and select the user s to be deleted 2 Right click on the selection and choose Delete Groups A Group contains a collection of users You can create a group of users to notify more then 1 person and avoid having to specify multiple users for each check you create This makes it much easier to add new alert recipients to that particular check since you just need to associate the new users to the recipients group Add a new group 1 Click on the Group folder under the Users and Groups node and go on NEW gt GROUP GFI Network Server Monitor Users and Groups e 153 NSMAdministrators Properties xi General Cei Specify the members of this group Group name ERARE MSEE Description NSM default administrators group Members A NSMAdministrator Add Remove Cancel Apply Screenshot 138 Group Properties dialog 2 Specify the group name e g NetworkAdministrators and the string which describes the group groups members e g File Server Administrator 3 To specify the members for this group click on Add select the users and click on OK to accept the selection Add members to an existing group To add users to a
197. strators of the machines which triggered any monitoring alerts Format network message G Network messages can be sent to both computers and users In the case of users the user must be logged on so as to successfully receive the message For both computers and users the messenger service must be enabled and started Cancel Apply Screenshot 105 Network Alerts Properties Format network message 1 Right click on the Alerting Options node and select Properties 2 Click on the Network tab and then click on Format Network Message 3 Make the required changes to the message The formatting of this message is identical to that of the email message 4 Click on OK to accept these changes NOTE For more information on variables and message templates please refer to the Message Template section in this chapter Global settings for SMS pager alerts NOTE This section is only applicable for advanced users We cannot guarantee that GFI Network Server Monitor will work with any SMS provider Before attempting any such configuration ensure that you have obtained the correct information from your SMS service provider GFI Network Server Monitor Global alerting options e 112 Alerting Options Ed Email Network SMS J Specify settings for available SMS systems through which SMS alerts will be sent Select SMS System FAXmaker SMS service provider template x In b
198. t button However make sure that the text file is in plain text 5 Optionally you can specify a short description for the new check s to be created 6 Click on Finish to generate the ICMP ping check s for the selected target computer s Different types of checks Different properties GFI Network Server Monitor ships with a selection of monitoring checks Different monitoring checks require different parameters to operate The New Check Wizard asks you to specify the parameters required by the selected check during its creation GFI Network Server Monitor Configuring GFI Network Server Monitor e 22 Logon credentials Some type of checks e g IMAP POP3 may require alternative logon credentials to the ones used to log on to the target computer When applicable you will be asked to confirm or specify alternative logon credentials to be used for that check New Check Logon Credentials Please enter the logon credentials that will be used by this check 9 Inherit authentication and access credentials from parent folder Recommended The monitoring check will connect to the target machine s using C the security context of the account under which the NSM engine service is running alternative credentials User name ason sss s Password ae certificate authentication Linux Unix logons User name S Certificate file D l Note To monitor Windows computers you need to specify alternative cre
199. t competing registrars Go to htto www_internic net E tad To tailed information Monitoring Checks Status GB Program Configuration p Users and Groups Domain Name GFLCOM Registrar THE NAME IT CORPORATION DBA NAMESERVICES NET Q Users DB Groups Whois Server whois atdomains com Alerting Options Referral URL http www aitiomains com General Options Q Database Maintenanc S Tools Sk Enumerate Computers Ze Enumerate Processes Ze ONS Lookup Bg Whois Name Server SERVER1 GFI COM Name Server SERVER4 GFILCOM Status ACTIVE Updated Date 22 mar 2005 Creation Date 03 aug 1995 Name Server SERV Name Server SERVERS Zg Traceroute Status ACTI Expiration Date 02 aug 2007 Ze SNMP Audit Updated Date 22 mar 2005 Ze SNMP Walk Creation Date 02 aug 1995 D General Expiration Date 02 aug 2007 gt gt gt Last update of whois database Fri 14 Oct 2005 14 04 26 EDT lt lt NOTICE The expiration date displayed in this record is the date the registrar s sponsorship of the domain name registration in the registry is currently set to expire This date does not necessarily reflect the expiration date of the domain name registrant s agreement with the sponsoring registrar Users may consult the sponsoring registrar s Whois database to view the registrar s reported date of expiration for this registration Whois tool configuration
200. t computer s S Check that the size of the file c Windows notepad exe a does not exceed the following size 1024 KB he 4 You can use the check_target tag in the file path lt Back Next gt Cancel Screenshot 64 File size check parameters dialog The file size function requires the following parameters e File name Specify the path to the file in UNC format e g server01 public docs txt which needs to be monitored e File size limit Specify the maximum size in KB MB or GB allowed for this file LDAP query NOTE GFI Network server monitor can verify if LDAP Services are available on target computers by querying the rootDSE for the relative information GFI Network Server Monitor Configuring monitor functions e 71 New Check LDAP Query Check the status of the LDAP services on a target computer s SS This check is used to monitor the status of the LDAP services offered by the target computer s NOTE This check does not take any parameters It will automatically connect to the target computer s and check for the availability of the LDAP querying services by creating an actual query object for the rootDSE of your directory service More Information RootDSE is defined as the root of the directory data tree on a directory server The purpose of the rootDSE is to provide data about the directory server including its capabilities and configuration WARNI
201. t computer services parameters from parent folder Specify the reboot computer restart services parameters to use on the occurrence of important events during the monitoring of this check Settings Screenshot 33 Monitoring check properties Actions tab setup 3 Click on the Actions tab and afterwards select the Inherit alert parameters from the parent folder option 4 Click on Apply to accept this configuration GFI Network Server Monitor Configuring GFI Network Server Monitor e 38 NOTE It is not possible to set a folder to inherit the parameters of a single alert method i e you cannot inherit just the email alert parameters Enable or disable checks FE GFI Network Server Monitor 7 0 ol x File Tools Help e gt m s ma x A kI Tools Explorer a Name Type State Target Cor GFI Network Server Monitor C Application Checks lt Folder gt Inherited fro B a Monitoring Checks Configuration EIISASERVER lt Folder gt Specified in H E ABC Ltd 0S and Services Checks lt Folder gt Inherited fro DEF Ltd eHTTP HTTPs HTTP HTTPs Disabled Notused ABC ktd By Jason Server H Enable Services Disabled Inherited fro m XYZ Ltd E gt jason qfi com Monitor Now Email Route Disabled Specified in C New Folder Cut New Folder1 wy C tmjason iad Monitoring Checks Status Delete g Program Configuration Rename H Tools _ H G2 General Properties
202. ted Folders is a configuration feature which allows you to organize monitoring checks in a deeper hierarchical manner which reflects more closely the specialized monitoring needs of your companies NOTE Nested folders are not available in the Professional Edition license of GFI Network Server Monitor NOTE Nested folders can also inherit properties from their parent folder You can create folders yourself New gt folder or you can let the New check wizards i e the New Check or Quick Start wizard create them automatically for you when new checks are being created Folders that are created by check wizards are given the names of target computers for which the checks are created GFI Network Server Monitor Check folders e 95 5 Monitoring Checks Configuration Monitoring Checks Configuration H E Administrators C Administrators J TMJason TMJason Tan ff H E ABC Ltd 9 ABC Ltd SHEE TES TMachines SEE TESTMachines m TMJason ey TMJason J TMJason CI TMJason NOTE Folders with the same name cannot exist on the same level This means that you can have folders with the same name but only if they are located within separate parent folders Creating new folders To create a folder 1 Right click on the destination i e where you wish to create the new folder then select New gt Folder For example to create a folder within another folder calle
203. that reflect the network layout you are monitoring by zone companies being served as well as check function Key features Enterprise class architecture GFI Network Server Monitor consists of the monitoring service called the GFI Network Server Monitor 7 Engine the configuration and management Ul program called GFI Network Server Monitor Configuration and a result monitoring service called GFI Network Server Monitor Attendant No agent software needs to be installed on GFI Network Server Monitor Introduction e 1 the computers that you wish to monitor The Network Monitor Engine is multi threading and can run 24 checks at a time This software architecture allows for high reliability and scalability to monitor both large and small networks Setup monitor checks using wizards Check setup wizards help the user to quickly set up an efficient monitoring system using the built in checks available in just few steps It is also possible to create a batch of checks simultaneously using the Quick Start Wizard By default the Quick Start Wizard can automatically generate monitoring checks for target computers running Windows or specific Linux OSs including SUSE Mandrake Redhat and Fedora Property inheritance By default GFI Network Server Monitor organizes all checks in folders Through property inheritance it is possible to specify central properties common to all checks to be contained in a folder e g target computer and have th
204. the Port field enter a valid TCP port number The default Timeout value is suitable for most connections Change the timeout value for servers that have slow response time Click here to load a sample lt Back n gt Cancel Screenshot 45 TCP IP check parameters dialog A TCP IP check requires the following parameters Port Specify the TCP port number of the protocol to be checked by default port 80 Send command when connected Enable this flag to send the specified command as soon as the connection is established Response must include the following string Enable this flag in order to check if the response message contains the specified string Timeout Number of milliseconds before the function will timeout Usually a connection to the server will be established within 1 second However some slow busy servers need more time Recommended value is 7000 milliseconds GFI Network Server Monitor Configuring monitor functions e 52 Email Route check Step 2 Send test email via SMTP Port SMTP saver Specific interval which should allow enough time Forward test email for the test email to be to destination processed and delivered to mailbox destination Step 3 Verify test email delivery using POP3 IMAP POP3 IMAP Server Server running GFI Network Server Monitor Figure 1 Email Route check operation The Email Route check verifies if your email services are work
205. ticular text Check that the file UNC path 2NSMINSTALLDIR Order txt 5 does not exist exists JV File must contain the following string not case sensitive www gfi com G You can use the check_target tag in the file path Click fier to load a sample lt Back Next gt Cancel Screenshot 58 File existence check parameters dialog A File Existence function requires the following parameters e File UNC Path Specify the path to the file which is to be checked in UNC format e g server share today_job_results txt e Does not exist Enable this option to check if the file exists In this case the check fails if the specified file is found e Exists Enable this option to check if the file exists In this case the check succeeds if the specified file is found e File must contain string Enable this flag and specify the string to be searched for in the existing file contents In this case the check will succeed only if the file exists and the specified string is present in the file contents GFI Network Server Monitor Configuring monitor functions e 66 Disk Space GFI Network Server Monitor can check for free disk space on local and remote computers Alerts can be sent whenever hard disk space falls below a specified value in order for you to take proactive actions before running out of disk space New Check Disk Space Check for free disk space on a tar
206. to specify additional credentials i e User name and password for authentication NOTE The New Check wizard automatically prompts you to configure alternative credentials during the creation of this check After the check has been created you can make changes to alternative credentials from the check properties dialog gt Logon Credentials tab When all the required details have been specified click OK to save and return to the Email Route check properties dialog SNMP monitoring checks Generic SNMP function GFI Network Server Monitor can check local or remote server connections by challenging a specific port GFI Network Server Monitor carries out this function by connecting to the target computer send it a sequence of bytes and analyze the response received GFI Network Server Monitor Configuring monitor functions e 58 New Check SNMP The SNMP GET message allows an information request about a specific S variable on a remote computer or device Connect to the SNMP agent on the target computer s using the following parameters Community String public When connected perform the following query OID Object ID 1 3 6 1 2 1 1 5 0 OID Data must be Equal To x JASON G The OID field can be indicated by physical name like 1 3 6 1 2 1 1 5 0 or 1 3 6 1 4 1 77 1 4 1 0 Click Here to load a sample lt Back Next gt Cancel Screenshot 50 SNMP check parameters dialog
207. to the POP3 mail server POP3 Default port is 110 e Timeout Specify the connection timeout in milliseconds The check will fail if a connection is not established before the specified timeout elapses e Requires an encrypted connection SSL Select this option if you want to encrypted the transmission i e establish a secure session GFI Network Server Monitor Configuring monitor functions e 46 by electronically authenticating each end of an encrypted transmission e Login to mailbox Select this option if you want to verify mail box authentication on your mail server e Mail count in folder Select this option if you want to count the number of emails in a POP3 mail box In addition you must specify the e Logical comparison operator State if the count should be equal to not equal to less than less than or equal to greater than greater than or equal to a specified value e The value i e the number of emails to which the retrieved count will be compared to NOTE When the Login to mailbox option is selected alternative credentials will be required so that this check can remotely log on to the mailbox on your POP3 server The New Check Wizard automatically prompts you to configure these alternative credentials i e the user name and password during the creation of this check After the check has been created you can make changes to alternative credentials from t
208. tor functions e 81 New Check Terminal Services Port Check Check that Terminal services are running on the specified port Open a connection to the target computer s on port 3389 usually port 3389 I Send command when connected Response must include the following string not case sensitive Timeout 7000 milliseconds G In the Port field enter a valid TCP port number The default Timeout value is suitable for most connections Change the timeout value for servers that have slow response time Click Here to load a sample lt Back Next gt Cancel Screenshot 76 Terminal Services Port Check parameters dialog A Terminal Services check requires the following parameters e Port Specify the TCP port number which will be used for communicating with a target computer The default TCP port is 3389 e Send command when connected Enable this option to send the specified command as soon as connection is established e Response must include the following string Enable this option and specify the string which must be present in the response The default response for SMTP servers generally includes 200 e Timeout Specify the number of milliseconds before the function times out Usually a connection to the server is established within 1 second However some slow busy servers need more time Recommended value is 7000 milliseconds NOTE Terminal Services che
209. turn 1 in case the Monitor Function is successful For instance if your function checks the existence of a certain directory and it does exist then return 1 e 0 False Return 0 in case the Monitor Function is not successful For instance if your function checks the existence of a certain directory and it does not exist then return 0 e 1 Unknown Return 1 in case the Monitor Function cannot determine True or False For instance if your function checks the existence of a certain directory on a server but it cannot find the server at all for instance because the computer is down return 1 It s very easy to write your own monitor functions in VBScript Use the following guidelines when writing a new function e The routine must be a Function not a Sub e The Function must return True 1 False 0 or Unknown 1 e Optionally use the EXPLANATION system variable to add your own explanation to the result of the function this EXPLANATION is shown in the client program each time the check is made GFI Network Server Monitor Writing your own monitoring functions e 173 e All variables must be dimmed except EXPLANATION EXPLANATION is a GFI Network Server Monitor system variable automatically dimmed by the GFI Network Server Monitor service The function must be written according to the following template Const retvalUnknown 1 Function Function i varl var2 varn If Not Pre condition Then EXPLANAT
210. uded in the subject field of the test email e Message Optional Specify the text to be included in the message body NOTE Test email messages can only be sent in plain text format When all required details have been specified click on OK to save and return to the Email Route check properties dialog GFI Network Server Monitor Configuring monitor functions e 55 Configuring the SMTP Server details General Specify the settings of the SMTP server to which a E connection will be established Host name IP 4CHECK_TARGET Port 25 Timeout 2000 J This server requires an encrypted connection SSL V Outgoing server SMTP requires authentication C Use credentials set in the folder check Use the following credentials User name WRX Password BEO Screenshot 48 SMTP Server configuration dialog Click on the Configure button of the relevant section to specify the following parameters NOTE The Host name IP parameter contains the details of the SMTP Server to which the connection will be established This parameter cannot be changed and it is configured to acquire its value from the CHECK_TARGET variable This variable takes its value directly from the Target Computer field in the Check properties This means that you must specify the correct Target Computer details i e the hostname IP of your SMTP server in the Check properties gt General tab Otherwise the check wil
211. uding the SMS text message and the recipient s number The SMS gateway then converts this email to SMS and sends it to the intended recipient NOTE This template can be customized allowing you to use any provider which supports email to SMS services GFI Network Server Monitor Global alerting options e 121 GFI Network Server Monitor Alerting Options xi Email Network SMS Specify settings for available SMS systems through which SMS alerts will be sent Select SMS System Generic SMS service provider template Set properties for the selected SMS system Property Value SMTP server mysmtpserver SMTP port 25 From myself mydomain com To email emailtosmsprovider com a CC Dptional settings Edit Retries 3 time s Format SMS message _Corcel aro Screenshot 111 Generic SMS service configuration dialog Requirements No specific hardware is required for this SMS messaging method The only true requirements are 1 You must be subscribed to an SMS gateway service 2 The SMTP server configured in the properties of the Generic SMS service must be able to send emails over the internet NOTE GFI Network Server Monitor cannot send SMS alerts through the Generic SMS service if no Internet connection is available or when your Internet connection is down Configuring the Generic SMS service provider template To configure the Generic SMS service 1 Right
212. ugh variable smsnumber which is substituted to text when the template email is generated The contents of this property are formatted as follows to smsnumber e Body line 5 Leave as default This property contains the text which must be included in the SMS These contents are automatically passed on by GFI Network Server Monitor through variable smsmessage which is substituted to text when the email is generated The contents of this property are formatted as follows text smsmessage GFI Network Server Monitor Global alerting options e 120 4 In the Retries entry box specify the number of times that GFI Network Server Monitor will try to send the email to the web based email to SMS provider should the first attempt fail 5 Click on OK to save your configuration settings Generic SMS service provider ee Pager GFI Network Server Monitor SMS via GSM Ten p Email Phone Laptop with SMS Gateway 3 based Pns Reci ienn SMS gateway TabletPC with p SMS Gateway 9 lt Template Email GSM Smart or Satellite phone Cell Phone SMTP Mail Server Figure 5 SMS alert flow via a web based Email to SMS service provider GFI Network Server Monitor can relay SMS text alerts via a web based SMS gateway Whenever an event triggers an SMS alert GFI Network Server Monitor will send a template email via SMTP to a web based SMS gateway This template email contains all the required SMS alert details incl
213. uilt GSM SMS Server FaxXmaker SMS service provider template Clickatell Email2SM5S Service Generic SMS service provider template NSM 5 2 6 0 SMS server From myself mydomain com To smsnumber smsmaker com Subject Alert Optional settings Edit Retries times Format SMS message Canc Amv Screenshot 106 SMS Alerts dialog Out of the box GFI Network Server Monitor can relay SMS alerts through the e In built GSM SMS Server e GFI FAXmaker SMS service provider template e Clickatell Email2SMS Service e Generic SMS service provider templates e NSM 5 x 6 0 SMS Server In built GSM SMS Server w M ms Va GSM NN D Phone Modem Laptop with SMS Gateway T SMS Center ini TabletPC with Recipient GFI Network Server monitor SMS Gatewa Machine with conncted y GSM phone medem X GSM Smart or Satellite phone Ce phone Figure 2 SMS alert flow via the in built GSM Server GFI Network Server Monitor Global alerting options e 113 The in built GSM SMS Server allows GFI Network Server Monitor to directly send SMS text messages through a GSM phone or GSM modem connected to the computer by serial cable Infrared or Bluetooth Alerting Options xi Email Network SMS Specify settings for available SMS systems through which SMS alerts will be sent Select SMS System in built GSM SMS Server x Set properties for the selected SMS system Property Value
214. uired specify an alternative target or use the Select button to choose the required POP3 IMAP server from the list of active servers on you network NOTE When using CHECK_TARGET make sure that you specify the correct Target Computer details i e the name IP of your POP3 IMAP server in the check properties gt General tab Otherwise the check will fail since it will not know which target to query e Port Specify the TCP port through which the connection will be established By default this parameter is set according to the value selected in the Type field i e 995 if POP3 is selected 993 if IMAP is selected in the Type field However you can still specify other port numbers by inputting them directly in the provided field e Timeout Specify the connection timeout value This value defines the time interval required for a connection to take place If the connection is not established within the specified time period a timed out will occur and an error is generated e This server requires an encrypted connection SSL Select this option if you want to encrypted the transmission i e establish a secure session by electronically authenticating each end of an encrypted transmission e Use credentials set in the folder check Select this option to use the authentication details specified in the check properties gt Logon Credentials tab e Use the following credentials Select this option
215. ured for SMS messaging For more information on how to configure the SMS gateway on GFI FAXmaker refer to The SMS Gateway chapter of the GFI FAXmaker manual You can download the GFI FAXmaker manual from http www gfi com downloads downloads aspx pid FAX amp lid en 2 A supported GSM phone modem connected to the GFI FAXmaker fax server computer or a subscription to a supported web based SMS provider Configuring the FAXmaker SMS service To configure the FAXmaker SMS Service 1 Right click on the Alerting Options node and select Properties 2 Click on the SMS tab and from the SMS System dropdown select FAXmaker SMS Service provider template 3 Double click on the property which you want to configure e g SMTP server and specify the relative parameters in the Edit Property dialog The FAXmaker SMS Service requires the following parameters e SMTP server Specify the name of the SMTP server through which GFI Network Server Monitor will send the template email to GFI FAXmaker GFI Network Server Monitor Global alerting options e 117 e SMTP port Specify the SMTP port through which the transmission will take place By default this parameter is set to 25 i e default SMTP port e From Specify the account from where the template email will be sent Format this parameter as follows lt name gt lt mydomain com gt e To Leave as default This is the email address on which GFI FAXmake
216. ve Credentials option or the Certificate Authentication option instead 3 Specify the user name e g JasonM and the password or the full path to the certificate file e g etc passwd cert_file GFI Network Server Monitor Configuring GFI Network Server Monitor e 27 4 When ready click on Apply to accept the current configuration Alerts and actions Properties TMJASON File Existence file Y oNSMINSTALLDIR o Order txt Ea General Check Parameters Logon credentials Actions Dependencies Maintenance Alerts E J Inherit alert parameters from the parent folder gt Specify the alert parameters to use on the occurence of important events during the monitoring of this check Settings Run external file J Inherit run external file parameters from parent folder Specify the run external file parameters to use on the occurrence of important events during the monitoring of this check Settings Reboot Computer Restart Services Specify the reboot computer restart services parameters to use on the occurrence of important events during the monitoring of this check Settings Screenshot 22 Actions Setup dialog Actions refer to the activities which follow the occurrence of an important event i e what happens when a monitoring check meets a specified condition GFI Network Server Monitor supports the following actions e Alerts Send messages t
217. vider and deliver the actual SMS message s most countries have one or more SMSC service providers GFI Network Server Monitor Global alerting options e 124 Configuring a TAP UCP compliant SMS Service Center Alerting Options NSM 5 5 6 0 SMS server v Screenshot 112 NSM 5 SMS Server configuration dialog 1 Right click on the Alerting Options node and select Properties 2 Click on the SMS tab and from the SMS System dropdown select NSM 5 x 6 0 SMS Server 3 Click on the Configure SMS Settings button GFI Network Server Monitor Global alerting options e 125 NSM5 SMS System Ed Provider Dial amp Modem Properties Specify the details for sending SMS alerts through TAP UCP compilant SMS Service Center Selected SMSC provider AirPage Providers list New Australia Link Australia Telstra Edit Austria CalMe Delete Austria Mobilkom 2 Belgium Mobistar Belgium Proximus Canada Cantel Canada PageNet1 Canada PageNet2 Canada Telus Denmark TeleD anmark Mobil Finland Sonera Germany D1 Alpha x Screenshot 113 Providers tab 4 Choose your SMSC service provider from the available list of providers NOTE To add unlisted providers refer to the Adding new SMSC providers section in this chapter GFI Network Server Monitor Global alerting options e 126 NSM5 SMS System Ea Provider Specify the dial and m
218. workstations and devices routers etc When it detects a failure GFI Network Server Monitor can alert you by email pager or SMS as well as take corrective action by for example rebooting the computer restarting a service or running a script or external file GFI Network Server Monitor can also choose the type of alert to be used depending on the time that an important event e g check failure occurs and also in relation to the working hours you specify during the setup of the intended recipients In GFI Network Server Monitor monitoring checks are created using wizards A wizard called the Quick Start Wizard which can create a batch of checks has also been included This wizard enables you to quickly create a number of checks at one go depending on computer OS role etc making it possible for GFI Network Server Monitor to be up and running in the least time possible In GFI Network Server Monitor all monitoring checks are organised in folders You can configure each monitoring check individually or you can choose to configure all the checks in a folder simultaneously through property inheritance Property Inheritance allows you to set up important check parameters such as target computer within the folder properties and have these parameters passed on to the checks contained in that folder GFI Network Server Monitor also supports nested folders This allows for greater flexibility when creating monitoring checks structures
219. xport Configurations For more information on configuration backups refer to the Export configurations section in the Other features chapter of this manual Moving folders GFI Network Server Monitor GFI Network Server Monitor Monitoring Checks Configuration Monitoring Checks Configuration Sa ABC Ltd Live Company H Network Zone 1 a ABC Ltd Test Company ma Folder Layout a Network Zone 2 LJ Network Zone 3 changes to Ly Network Zone 3 LJ Network Zone 4 J Network Zone 4 H E MNO Ltd H E MNO Ltd Drag Folder with all its content from Test Drop Folder into Live Environment Environment folder e g ABC Ltd Test folder e g ABC Ltd Live To move a folder 1 Right click on the folder that you wish to move and select Cut GFI Network Server Monitor Check folders e 97 2 Go on the preferred destination and select Paste NOTE You can also drag and drop the folder from its present to target location Searching for folders Find Folder Ea Find what Jisas erver J Match Whole Word Close Screenshot 92 Find folder dialog The Find Folder tool allows you to search and locate folders in your folder tree To start a folder search 1 Right click on the Monitoring Checks Configuration node and select Find Folder 2 In the Find Folder dialog specify the required search string This can be the complete folder name as well as any character s which are present
220. ype Options 2 D E ABC Adi GO ALEXC DEVMCH 1 Windows XP Workstation General Advanced i ao BI ANDREIDEV 4208C Windows XP Workstation a a SEED gil ANDREIZ Windows XP Workstation Dee Keeni B ANDREWZ Windows XP Workstation C Only these Monitoring Checks Status Era Progen Configasion SA AUTORESPONDER Windows XP Workstation EAA a S BARBARA Windows XP Workstation Users and Groups Windows 95 98 False a Q Users BA BRIANAZ Windows XP Workstation Windows NT False DB Groups sa cctv Windows XP Workstation Windows 2000 False Alerting Options S CHRISY Windows XP Workstation Windows 2003 False General Options DAVIDV Windows XP Workstation Windows XP False Database Maintenance Op S DENNISM Windows XP Workstation Novell False E Tools B EDWARD Windows XP Workstation Line False Ze Enumerate Computers B EMMANUELG DEV Windows XP Workstation B Services Enumerate Processes ij EMMANUELG DEV2 Windows server 2003 Server Microsoft SOL Serv False e DNS Lookup BI FaXSRV Windows server 2003 Server Primary Domain Ce False Ze Whois S FILESERVER Windows server 2003 Server Backup Domain Ce False Traceroute B FSERVER Windows 2000 server Workstation Apple file protocol s False SNMP Audi S GFILAPTOP Windows XP Workstation Servers sharing prir False p A NEW SA HP 2100 Windows 95 98 ME Workstation Servers sharing dial False i v HP LASERJET 5 Windows 95 98 ME Workstation F Types T3 Version Information ai isazka Wi

GFI Network Server Monitor, UPG, 5-24u

Contents

Download Pdf Manuals

Related Search

Related Contents