KERBEROS AUTHENTICATION

Hi there,

Please let me know what sensors you want to use here, so we can check if this authentication method is available there.

Kind regards,
Birk Guttmann, Tech Support Team

Do you have any guidance/documentation on Kerberos/NTLM with PRTG?

I use a lot of WMI sensors. I have seen the other threads where it has been stated that PRTG does not support Kerberos with WMI.

I also have a lot of storage devices, eg QNAPs, which are only monitored via SNMP, but I can see NTLM Authentication attempts using a domain user from the probe server to the storage device, using the PRTG username. I am not sure why this is.

We have just taken the decision to completely disable/eliminate NTLM. While it is possible to add exceptions for legacy devices/applications, doing so for PRTG will mean adding an exception for every device which defeats the purpose.

Security company's are strongly recommending eliminating NTLM and given the increase in successful network compromises over the last 12 months, all companies are tightening security.

Hello there,

Since this is a quite specific request, I would ask you to open a support case here. Therefore, simply write a mail to [email protected].

Kind regards,
Birk Guttmann, Tech Support Team

Hi Birk,

This need is not that specific.

With all the attacks by cryptolockers, our customers spend a lot of time and money securing their Windows infrastructures. It is no longer possible to recommend using a domain administrator account with a hash that goes unencrypted on the network.

Paessler would have to work hard to quickly support kerberos authentication for WMI !

This an urgent feature request ;-)

Best regards,

Matthieu

Hey Matthieu,

Feel free to open an official feature request. How this works and how we handle those is explained here.

Kind regards,
Birk Guttmann, Tech Support Team