RSA SecurID Host Template

Templates, scripts for templates, scripts and requests for templates.

Moderators: Moderators, Developers

Post Reply
Author
Message
yreddy
Posts: 43
Joined: Fri May 02, 2008 7:33 am
Location: Canada

RSA SecurID Host Template

#1 Post by yreddy » Thu Oct 07, 2010 4:03 am

Hi,

I've created a Host Template for the RSA SecurID appliance. The following elements are graphed:
- AM Authentications (see attachment below)
- AM New PIN
- AM Next Tokencode
- IMS Active Sessions
- Token Assignment (see attachment below)
- Token Enabled
- CPU Usage
- Load Average
- Memory Usage
- Processes
- TCP Counters
- TCP Current Established
- Uptime
- Users Logged On
- Mounted Partitions
- Interface Statistics

Check out the complete description and download it here:
http://docs.cacti.net/usertemplate:host:rsa:securid

Feel free to let me know if you experience any issue using the template.
Youri
Attachments
rsa_securid-token_assignment.png
Token Assignments
rsa_securid-token_assignment.png (24.19 KiB) Viewed 4446 times
rsa_securid-am_authentication.png
Authentication Results
rsa_securid-am_authentication.png (31.96 KiB) Viewed 4446 times

nuzzy
Posts: 42
Joined: Mon Feb 23, 2009 10:33 am

Re: RSA SecurID Host Template

#2 Post by nuzzy » Sun Oct 10, 2010 9:56 am

Did you update it? I only see older ones from June 2010 and 2009.
Cacti 0.8.8a on CentOS

yreddy
Posts: 43
Joined: Fri May 02, 2008 7:33 am
Location: Canada

Re: RSA SecurID Host Template

#3 Post by yreddy » Sun Oct 10, 2010 1:39 pm

nuzzy wrote:Did you update it? I only see older ones from June 2010 and 2009.
No I did not update it. I posted it on the Forum in order to give it more visibility.. Sorry for the confusion.

Youri

zaohua768
Posts: 2
Joined: Mon Oct 11, 2010 9:42 pm

Re: RSA SecurID Host Template

#4 Post by zaohua768 » Mon Oct 11, 2010 9:46 pm

No I did not update it. I posted it on the Forum in order to give it more visibility.. Sorry for the confusion.You may need to manually add the Data Queries from the screenshots on page 3 of this post. I have re-exported the templates from my new install (Version 0.8.7b) so the required Data Queries should be bundled with the templates. Make sure you have a Data Querie titled "ucd/net - Get Device I/O" in order to make sure the templates work.

awdturbo98
Posts: 2
Joined: Tue Jan 26, 2010 10:38 am

Re: RSA SecurID Host Template

#5 Post by awdturbo98 » Wed Apr 06, 2011 9:44 am

Any chance that this can be made to work for SecurID 6.1? It seems that no data is written once the templates are imported. How would I go about modifying the template?

visk
Posts: 4
Joined: Fri Nov 26, 2010 5:06 am

Re: RSA SecurID Host Template

#6 Post by visk » Mon Sep 19, 2011 2:07 am

awdturbo98 wrote:Any chance that this can be made to work for SecurID 6.1? It seems that no data is written once the templates are imported. How would I go about modifying the template?
Did you find something for SecurID 6.1 ?

User avatar
smlick
Cacti User
Posts: 267
Joined: Tue May 20, 2008 4:09 am
Location: Italy, Rome

Re: RSA SecurID Host Template

#7 Post by smlick » Wed Jan 04, 2012 9:40 am

Tnx Yreddy for your template.
I imported succesfully into cacti 0.8.7g but I get bad result when I tried to graph something.
This is wat I get in Clog:

01/04/2012 03:35:21 PM - CMDPHP: Poller[0] Host[499] Description[RIACE004RM01] DS[1049] Graphs['RIACE004RM01 - Memory Usage'] WARNING: Result from SNMP not valid. Partial Result: U
01/04/2012 03:35:21 PM - CMDPHP: Poller[0] Host[499] Description[RIACE004RM01] DS[1038] Graphs['RIACE004RM01 - RSA - Token Enabled'] WARNING: Result from SNMP not valid. Partial Result: U
01/04/2012 03:35:21 PM - CMDPHP: Poller[0] Host[499] Description[RIACE004RM01] DS[1037] Graphs['RIACE004RM01 - RSA - Token Enabled'] WARNING: Result from SNMP not valid. Partial Result: U
01/04/2012 03:35:21 PM - CMDPHP: Poller[0] Host[499] Description[RIACE004RM01] DS[1043] Graphs['RIACE004RM01 - Load Average'] WARNING: Result from SNMP not valid. Partial Result: U
01/04/2012 03:35:21 PM - CMDPHP: Poller[0] Host[499] Description[RIACE004RM01] DS[1034] Graphs['RIACE004RM01 - RSA - IMS Active Sessions'] WARNING: Result from SNMP not valid. Partial Result: U
01/04/2012 03:35:21 PM - CMDPHP: Poller[0] Host[499] Description[RIACE004RM01] DS[1033] Graphs['RIACE004RM01 - RSA - AM Next Tokencode'] WARNING: Result from SNMP not valid. Partial Result: U
01/04/2012 03:35:21 PM - CMDPHP: Poller[0] Host[499] Description[RIACE004RM01] DS[1032] Graphs['RIACE004RM01 - RSA - AM New PIN'] WARNING: Result from SNMP not valid. Partial Result: U
01/04/2012 03:35:21 PM - CMDPHP: Poller[0] Host[499] Description[RIACE004RM01] DS[1031] Graphs['RIACE004RM01 - RSA - AM Authentications'] WARNING: Result from SNMP not valid. Partial Result: U
01/04/2012 03:35:21 PM - CMDPHP: Poller[0] Host[499] Description[RIACE004RM01] DS[1030] Graphs['RIACE004RM01 - RSA - AM Authentications'] WARNING: Result from SNMP not valid. Partial Result: U
01/04/2012 03:35:21 PM - CMDPHP: Poller[0] Host[499] Description[RIACE004RM01] DS[1029] Graphs['RIACE004RM01 - CPU Usage'] WARNING: Result from SNMP not valid. Partial Result: U
01/04/2012 03:35:21 PM - CMDPHP: Poller[0] Host[499] Description[RIACE004RM01] DS[1040] Graphs['RIACE004RM01 - CPU Usage'] WARNING: Result from SNMP not valid. Partial Result: U
01/04/2012 03:35:21 PM - CMDPHP: Poller[0] Host[499] Description[RIACE004RM01] DS[1050] Graphs['RIACE004RM01 - Memory Usage'] WARNING: Result from SNMP not valid. Partial Result: U
01/04/2012 03:35:21 PM - CMDPHP: Poller[0] Host[499] Description[RIACE004RM01] DS[1035] Graphs['RIACE004RM01 - RSA - Token Assignment'] WARNING: Result from SNMP not valid. Partial Result: U
01/04/2012 03:35:21 PM - CMDPHP: Poller[0] Host[499] Description[RIACE004RM01] DS[1047] Graphs['RIACE004RM01 - Memory Usage'] WARNING: Result from SNMP not valid. Partial Result: U
01/04/2012 03:35:21 PM - CMDPHP: Poller[0] Host[499] Description[RIACE004RM01] DS[1048] Graphs['RIACE004RM01 - Memory Usage'] WARNING: Result from SNMP not valid. Partial Result: U
01/04/2012 03:35:21 PM - CMDPHP: Poller[0] Host[499] Description[RIACE004RM01] DS[1046] Graphs['RIACE004RM01 - Memory Usage'] WARNING: Result from SNMP not valid. Partial Result: U
01/04/2012 03:35:21 PM - CMDPHP: Poller[0] Host[499] Description[RIACE004RM01] DS[1045] Graphs['RIACE004RM01 - Load Average'] WARNING: Result from SNMP not valid. Partial Result: U
01/04/2012 03:35:21 PM - CMDPHP: Poller[0] Host[499] Description[RIACE004RM01] DS[1042] Graphs['RIACE004RM01 - CPU Usage'] WARNING: Result from SNMP not valid. Partial Result: U
01/04/2012 03:35:21 PM - CMDPHP: Poller[0] Host[499] Description[RIACE004RM01] DS[1041] Graphs['RIACE004RM01 - CPU Usage'] WARNING: Result from SNMP not valid. Partial Result: U
01/04/2012 03:35:21 PM - CMDPHP: Poller[0] Host[499] Description[RIACE004RM01] DS[1039] Graphs['RIACE004RM01 - CPU Usage'] WARNING: Result from SNMP not valid. Partial Result: U
01/04/2012 03:35:20 PM - CMDPHP: Poller[0] Host[499] Description[RIACE004RM01] DS[1044] Graphs['RIACE004RM01 - Load Average'] WARNING: Result from SNMP not valid. Partial Result: U
01/04/2012 03:35:20 PM - CMDPHP: Poller[0] Host[499] Description[RIACE004RM01] DS[1036] Graphs['RIACE004RM01 - RSA - Token Assignment'] WARNING: Result from SNMP not valid. Partial Result: U

In the images below what I get when I add new device with RSA SecurID template.

Any idea?

Regards
Alessio
Attachments
RSA_not_graph1.JPG
RSA_not_graph1.JPG (85.87 KiB) Viewed 3990 times
RSA_not_graph.JPG
RSA_not_graph.JPG (112.46 KiB) Viewed 3990 times
Cacti Version 0.8.8c production / 0.8.8c test W2008 -- Plugin:Weathermap - Monitor - CAMM 1.6.7 :) - Nectar - GPS Map

noname
Cacti Guru User
Posts: 1566
Joined: Thu Aug 05, 2010 2:04 am
Location: Japan

Re: RSA SecurID Host Template

#8 Post by noname » Fri Jan 06, 2012 12:43 am

Is your device accessible via SNMP?

Rno
Cacti User
Posts: 361
Joined: Wed Dec 07, 2011 9:19 am

Re: RSA SecurID Host Template

#9 Post by Rno » Fri Jan 06, 2012 2:15 am

Don't forget that RSA use port 8002 by default for the AM, IMS and all stuf releated to token.

And it's the SNMP setup you can find on the security console, under setup->instance configuration
then on each device you have to activate the SNMP setup and configure it.

It's not just the SNMP part that you can find on the Operation Console
CentOS
Production
Cacti 0.8.8h
Spine 0.8.8h
PIA 3.1
Aggregate 0.75
Monitor 1.3
Settings 0.71
Weathermap 0.98
Thold 0.5
rrdclean 0.41

Own plugin: LinkDiscovery 0.45, Map 0.37

Test
Cacti 1.2.8
Spine 1.2.8
thold 1.0.6
monitor 2.3.5
syslog 2.4
php 7.2.11
mariadb 5.5.56
Own plugin:
ExtendDB 1.1.2
LinkDiscovery 1.2.6
Map 1.2.7

User avatar
smlick
Cacti User
Posts: 267
Joined: Tue May 20, 2008 4:09 am
Location: Italy, Rome

Re: RSA SecurID Host Template

#10 Post by smlick » Sat Jan 07, 2012 2:53 pm

Yes is accessible trough SNMP as you can see down in the second image query mounted partition and the other below succeded.
When I tried to use port 8002 insted 161 in Cacti device setup I get SNMP error I tried also to set port 161 in Auth manager but with no success.
So you set 8002 inside Cacti device setup and SNMP get the right info from RSA???

Other suggestion??

Regards
Alessio
Cacti Version 0.8.8c production / 0.8.8c test W2008 -- Plugin:Weathermap - Monitor - CAMM 1.6.7 :) - Nectar - GPS Map

yreddy
Posts: 43
Joined: Fri May 02, 2008 7:33 am
Location: Canada

Re: RSA SecurID Host Template

#11 Post by yreddy » Mon Jan 23, 2012 6:26 pm

What version of SecurID Appliance are you using ? Please take note that I've tested the template only on a RSA A130 SecurID Appliance 3.0 with RSA Authentication Manager 7.1 so their might be some compatibility issues out there.

And I don't have access to those devices anymore neither..

Youri

User avatar
smlick
Cacti User
Posts: 267
Joined: Tue May 20, 2008 4:09 am
Location: Italy, Rome

Re: RSA SecurID Host Template

#12 Post by smlick » Tue Jan 24, 2012 4:18 am

I have not tell you all the truth :oops: I have not the RSA SecurID appliance but RSA Auth manager 7.1 installed into 2 Windows server so is possible that the MIBS are different.......
But is strange because I get no response from every OID except the standard from windows so I think that the server communicate ok SNMP but RSA not.
As I told you before I tried the standard RSA SNMP port (8002) and also 161 with no success.
I configured SNMP only in RSA security console under setu-->instances-->SNMP and I made it for the 2 RSA node that I have.
There's other that I have to set under RSA to enable SNMP?

Regards
Alessio
Attachments
RSA_Auth.png
RSA_Auth.png (26.49 KiB) Viewed 3858 times
Cacti Version 0.8.8c production / 0.8.8c test W2008 -- Plugin:Weathermap - Monitor - CAMM 1.6.7 :) - Nectar - GPS Map

dhirajkeshari
Posts: 15
Joined: Sun Jul 22, 2012 1:06 pm

Re: RSA SecurID Host Template

#13 Post by dhirajkeshari » Mon Oct 22, 2012 8:35 am

Hi,

anyone can provide me the steps to load RSA MIB file. RSA Authentication manager is installed on linux server.

Post Reply