Forums  Register  Login  My Profile  Inbox  Address Book  My Subscription  My Forums 

Member List  Search  FAQ  Ticket List  Log Out

 

All auth HTTP Sites Fail

 
Logged in as: Guest
Users viewing this topic: none
  Printable Version
All Forums >> [Networking & Security] >> GFI Network Server Monitor >> All auth HTTP Sites Fail Page: [1] 2   next >   >>
Login
Message << Older Topic   Newer Topic >>
All auth HTTP Sites Fail - 8.Jun.2005 7:30:00 AM   
JoeDali

 

Posts: 7
Joined: 19.May2005
From: Denver
Status: offline
Whether its OWA or a simple IIS based login, nothing works for me.

Please let me know if there is a fix in the works or if I am doing something blatantly wrong.

Thanks
Post #: 1
RE: All auth HTTP Sites Fail - 9.Jun.2005 4:01:00 AM   
wstahn

 

Posts: 115
Joined: 26.Dec.2004
From: Hamburg/Germany
Status: offline
Is your NSM installed on the same machine as IIS?

(in reply to JoeDali)
Post #: 2
RE: All auth HTTP Sites Fail - 10.Jun.2005 4:44:00 AM   
JoeDali

 

Posts: 7
Joined: 19.May2005
From: Denver
Status: offline
No I have NSM installed on a completely different box.

(in reply to JoeDali)
Post #: 3
RE: All auth HTTP Sites Fail - 15.Jun.2005 3:54:00 AM   
blaster88

 

Posts: 16
Joined: 12.Jun.2005
From: McLean, VA
Status: offline
Make sure that you are using the same url for checking that the certificate uses. Put the check url in a browser, and if you get a popup box that says the certificate is invalid, it will fail a check.

(in reply to JoeDali)
Post #: 4
RE: All auth HTTP Sites Fail - 27.Jun.2005 10:22:00 PM   
masc2001

 

Posts: 23
Joined: 19.Jun.2005
Status: offline
I had the same effect. But I found out the following:
When checking the availibility of an IIS-Site in my own network, intranet, no proxy, sometimes it works, sometimes not. It depends on the kind of file that is browsed, html or aspx.
Files like http://servername/default.html = IT WORKS
Files like http://servername/default.aspx = DON'T WORK.
So when I had trouble to set up the HTTP-Check, I generate an own html-File in the root directory of the IIS-Site, and the check succeeds for this file.
But this can't be the solution?!
Any ideas?

(in reply to JoeDali)
Post #: 5
RE: All auth HTTP Sites Fail - 28.Jun.2005 3:42:00 AM   
JoeDali

 

Posts: 7
Joined: 19.May2005
From: Denver
Status: offline
I'm really beginning to question the reliability of this product. After installing the latest NSMEngine.exe yesterday I'm still getting no email alerts after rebooting several servers to test getting an ICMP failure email.

It appears I'm not the only one having these problems. Please GFI do some more rigorous testing of the product. Something is not right here. I think there is memory leak issues with all the unnecessary reboots I have to perform.

At least we are using MS MOM 2005 as a supplement. But I told my boss GFI was the best. I'm not so sure anymore.

(in reply to JoeDali)
Post #: 6
RE: All auth HTTP Sites Fail - 4.Jul.2005 4:25:00 AM   
Nicks

 

Posts: 2741
Joined: 17.Mar.2003
Status: offline
masc2001,

Did you already contact support on this issue. Network Server Monitor is waiting for a specific response from the server. It could be that the response that it is expcecint was not recieved, and the check will show as failed. Can you enable debug in Network Server Monitor and send us (support@gfi.com) a set of troubleshooting files:

a) Stop all the GFI Network Server Monitor services.
b) Open Regedit (Start -> Run -> Type 'regedit' and press Enter)
c) Browse to [HKEY_LOCAL_MACHINE\SOFTWARE\GFI\NSM6\Config]
d) Change the 'debug' dword value from '0' to '1'
e) Restart the services stopped in (a)
f) Reproduce the problem.
g) If the problem persists, send me a new set of trouble shooter files. Please delete the support directory, re-run the trouble shooter application, zip up and resend me the generated files.

JoeDali,

The last post in this thread is not really related to the rest of the thread. Can you please open a new thread for that.

Thank you.

(in reply to JoeDali)
Post #: 7
RE: All auth HTTP Sites Fail - 4.Jul.2005 5:50:00 AM   
RayPesek

 

Posts: 246
Joined: 7.May2004
Status: offline
"Files like http://servername/default.html = IT WORKS

Files like http://servername/default.aspx = DON'T WORK."

I don't see how it could ever work with a dynamic content file. A dynamic content file, like .asp and its variants, is compiled by the web server software when a browser accesses it into the content rendered by your browser.

.asp* files can contain parameters, like user names and passwords to login to a backend database, so they must never be accessed directly. Think of them as the source code of a program that is compiled into the .exe file you actually run.

If NSM could access the .asp* file directly, then it would be possible for a hacker to do the same and see the source code that is creating the page, along with embedded credentials. The web server itself is what prevents (hopefully) anyone or anything from accessing the source file directly.

Your workaround is the only way to make it work that I can see.

Ray

(in reply to JoeDali)
Post #: 8
RE: All auth HTTP Sites Fail - 4.Jul.2005 10:53:00 PM   
masc2001

 

Posts: 23
Joined: 19.Jun.2005
Status: offline
nicks,
thanks for your interest; I'll send the support files.

RayPesek,
thanks for thinking about my post. I'll try to live with my little workaround. But a lot of web servers (e.g. Exchange web access, Sharepoint portal servers) do not have html start pages but active server pages as start page. It's not satisfying that it seems that there is no easy connectivity check possible (without my workaround), especially because the browser on the server where NSM is installed can contact the site without any problems.
If there is any result from sending my support files, I promise to post here.

(in reply to JoeDali)
Post #: 9
RE: All auth HTTP Sites Fail - 5.Jul.2005 2:24:00 PM   
RayPesek

 

Posts: 246
Joined: 7.May2004
Status: offline
Another check, since you're just looking for whether the server is serving up pages, would be to test for the presence of a robots.txt file. If you don't have one, create a text file named "robots.txt" in the root of the site and paste these two lines into it:

User-agent: *
Disallow: /

It's a (voluntary) directive to search engines asking them not to index any of the pages on the site. I keep it on all of my employee-only sites.

Ray

(in reply to JoeDali)
Post #: 10
RE: All auth HTTP Sites Fail - 5.Jul.2005 11:41:00 PM   
masc2001

 

Posts: 23
Joined: 19.Jun.2005
Status: offline
thanks, good idea. The problem is, I've got not enough rights to add files in the root directory of every web server that I need to monitor. And the robots.txt doesn't exist there.

(in reply to JoeDali)
Post #: 11
RE: All auth HTTP Sites Fail - 6.Jul.2005 6:28:00 PM   
blaster88

 

Posts: 16
Joined: 12.Jun.2005
From: McLean, VA
Status: offline
I am using v6, and I check .aspx pages all the time.

masc2001, how do you have your check configured? Are you going for availability, or doing a content check?

I did have a problem doing content checking on an .aspx page, and it was the result of improper coding in the .aspx page - the text was rendered outside of the html tags, so NSM couldn't see it. Got the developer to fix the page, and it worked fine.

(in reply to JoeDali)
Post #: 12
RE: All auth HTTP Sites Fail - 6.Jul.2005 6:41:00 PM   
blaster88

 

Posts: 16
Joined: 12.Jun.2005
From: McLean, VA
Status: offline
quote:
Originally posted by JoeDali:
I'm really beginning to question the reliability of this product. After installing the latest NSMEngine.exe yesterday I'm still getting no email alerts after rebooting several servers to test getting an ICMP failure email.

It appears I'm not the only one having these problems. Please GFI do some more rigorous testing of the product. Something is not right here. I think there is memory leak issues with all the unnecessary reboots I have to perform.

At least we are using MS MOM 2005 as a supplement. But I told my boss GFI was the best. I'm not so sure anymore.

For testing, why not create some checks that don't require you to reboot servers? That's painful.

If it has to be an ICMP check, assign a second IP address to a server, create a check for it, then delete the ip from the server. That will fail the check, for sure, and if the mail is configured, it should go. But just do something simpler, and non-destructive, like a file existence check, and make sure the interval is short and 1 failed check goes to a failed state. That way you don't have to wait around. Plus, if you are taking the default options on a check - 2 minute check interval, 3 errors to failure, then you looking at 6 minutes to failure - if the machine completes the reboot in that time period, it may never fail, and it won't send an email.

Does your email work when you send a test message from the Alerting Options properties?

(in reply to JoeDali)
Post #: 13
RE: All auth HTTP Sites Fail - 6.Jul.2005 10:10:00 PM   
masc2001

 

Posts: 23
Joined: 19.Jun.2005
Status: offline
AvAdmin,
this is interesting for me to got to know. See the post from RayPasek (Juli 04) who says this maybe wouldn't be possible.
I am using V6 too. And I only do an simple availibilty check. Now I'm still waiting for the response of GFi's support...
Don't you have any problems with availibility checks to Outlook Web Access pages or Share Point Portal Server pages? Nothing works for me. Only "normal" html-pages on an IIS.

(in reply to JoeDali)
Post #: 14
RE: All auth HTTP Sites Fail - 7.Jul.2005 12:35:00 AM   
blaster88

 

Posts: 16
Joined: 12.Jun.2005
From: McLean, VA
Status: offline
Well, it is possible, I do it. However, I don't check OWA or SharePoint, so I don't know that can be done for sure. OWA should be doable. See my Post #4 above - make sure you can do the check on your own in a browser. Anything that causes a popup message will likely fail the check - like if you have a banner message, or an invalid certificate (if its https)

(in reply to JoeDali)
Post #: 15
Page:   [1] 2   next >   >>
All Forums >> [Networking & Security] >> GFI Network Server Monitor >> All auth HTTP Sites Fail Page: [1] 2   next >   >>
Jump to:





New Messages No New Messages
Hot Topic w/ New Messages Hot Topic w/o New Messages
Locked w/ New Messages Locked w/o New Messages
 Post New Thread
 Reply to Message
 Post New Poll
 Submit Vote
 Delete My Own Post
 Delete My Own Thread
 Rate Posts