New Question
 
 
PRTG Network Monitor

Intuitive to Use.
Easy to manage.

200.000 administrators have chosen PRTG to monitor their network. Find out how you can reduce cost, increase QoS and ease planning, as well.

Free PRTG
Download >>

 

What is this?

This knowledgebase contains questions and answers about PRTG Network Monitor and network monitoring in general. You are invited to get involved by asking and answering questions!

Learn more

 

Top Tags


View all Tags


Probes are trying to logon to Cisco devices with SSH credentials

Votes:

0

Your Vote:

Up

Down

PRTG is trying to logon to cisco devices with CREDENTIALS FOR LINUX/SOLARIS/MAC OS (SSH/WBEM) SYSTEMS which is generating alterts Any idea how to stop it?

cisco logon ssh

Created on May 8, 2017 12:08:22 PM by  dwieckowski (0) 1



6 Replies

Votes:

0

Your Vote:

Up

Down

Hello there,

When PRTG uses these credentials for direct queries against those devices, then...

a) those devices have been added to PRTG

b) sensors were added to those devices that require those credentials (SSH, Linux etc. sensors)

....otherwise PRTG would have no reason to send queries with those particular credentials towards those devices.

Kind regards,

Erhard

Created on May 9, 2017 2:40:48 PM by  Erhard Mikulik [Paessler Support]



Votes:

0

Your Vote:

Up

Down

Hi! Only sensor that I have for Cisco switches and WG are SNMP Moreover there should be sensor with error due to problems with login via ssh, right Acutally all green, no problems But Cisco ACS is reporting failed logons

Darek

Created on May 9, 2017 9:01:58 PM by  dwieckowski (0) 1



Votes:

0

Your Vote:

Up

Down

Hello! Sure that devices are there but I do not have any ssh related sensor Only SNMP and all are green, without error So thats not a case

BR

Darek

Created on May 10, 2017 5:34:42 PM by  dwieckowski (0) 1



Votes:

0

Your Vote:

Up

Down

Hello Darek,

Are you maybe running auto-discoveries in PRTG against those devices? That could possibly cause such login attempts or maybe sensor recommendation.

To verify that these login attempts are indeed coming from PRTG, stop service PRTG Probe Service to see if the login attempts stop then.

Kind regards,

Erhard

Created on May 11, 2017 8:23:25 AM by  Erhard Mikulik [Paessler Support]



Votes:

0

Your Vote:

Up

Down

Hello! There is no autodiscovery on those devices set - only manual and no any recommendations They are coming from probes as source addresses are probes' ones and username is same created ONLY for logon to SSH/Linux machines from PRTG

Created on May 12, 2017 7:41:06 AM by  dwieckowski (0) 1



Votes:

0

Your Vote:

Up

Down

Have you tried stopping PRTG Probe service to see if the attempts also stop then?

For further investigation I would suggest to send us an email to [email protected], enter PAE867556 in the subject and also let us know the affected hosts as you have entered them in PRTG (IPs/hostnames). Furthermore please open PRTG Administration Tool on the PRTG server, tab "Logs and Info", there you find an option for uploading logs. Also enter there PAE867556 in the upload form.

Thank you & kind regards,

Erhard

Created on May 12, 2017 4:57:45 PM by  Erhard Mikulik [Paessler Support]



Please log in or register to enter your reply.


Disclaimer: The information in the Paessler Knowledge Base comes without warranty of any kind. Use at your own risk. Before applying any instructions please exercise proper system administrator housekeeping. You must make sure that a proper backup of all your data is available.