[EMAIL PROTECTED] wrote on 14/09/2006 12:22:30: > Hi, > > Has any one carried out a threat analysis for Nagios Agents ( > NSClient and NRPE). > > Do we have any information regarding them?
Probably, but why would you trust someone else's threat analysis? Their criteria may be wildly different to your infrastructure and policies, not to mention an untrusted source. Why would you base your own security analysis on someone else's security model? Read up a bit and make up your own mind. There is plenty of information regarding them if you do a little searching. http://sourceforge.net/projects/nrpe/ http://nagios.org/docs/ http://nagios.org/faqs/viewfaq.php?faq_id=101 Some things to consider: Access: Encrypted connection, ACLs, TCPWrappers, Allow sending variables rob This message and any attachments (the "message") is intended solely for the addressees and is confidential. If you receive this message in error, please delete it and immediately notify the sender. Any use not in accord with its purpose, any dissemination or disclosure, either whole or partial, is prohibited except formal approval. The internet can not guarantee the integrity of this message. BNP PARIBAS (and its subsidiaries) shall (will) not therefore be liable for the message if modified. ********************************************************************************************** BNP Paribas Private Bank London Branch is authorised by CECEI & AMF and is regulated by the Financial Services Authority for the conduct of its investment business in the United Kingdom. BNP Paribas Securities Services London Branch is authorised by CECEI & AMF and is regulated by the Financial Services Authority for the conduct of its investment business in the United Kingdom. BNP Paribas Fund Services UK Limited is authorised and regulated by the Financial Services Authority ------------------------------------------------------------------------- Using Tomcat but need to do more? Need to support web services, security? Get stuff done quickly with pre-integrated technology to make your job easier Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo http://sel.as-us.falkag.net/sel?cmd=lnk&kid=120709&bid=263057&dat=121642 _______________________________________________ Nagios-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/nagios-users ::: Please include Nagios version, plugin version (-v) and OS when reporting any issue. ::: Messages without supporting info will risk being sent to /dev/null
