Restituisci
-
Titolo
Monitoring the Defender Security Server -
Descrizione
What can be done to remotely monitor the Defender Security Server to ensure that it is up and and answering RADIUS authentication requests?
-
Causa
Monitoring the RADIUS port that the DSS binds to would only partially monitor the Defender Security Server.
By using a third party RPC monitor application, you could verify that the DSS is running and listening on the configured port. However, this type of RPC monitoring would not verify that the DSS is processing RADIUS request and authentications.
-
Risoluzione
To verify this functionality, a RADIUS authentication would need to be performed.
One way to perform this would be:
- Setup a new Access Node and assign to the DSS
- Configure a new Defender Policy with a "Defender password" authentication
- Assign a Defender password to the test account. Go into the users AD properties | Defender tab | Click on Password...
- Perform an authentication from a RADIUS test utilityAnother possibility would be to enable the syslog feature at the DSS (Audit tab) and verify that the authentication attempts are being processed as expected throughout the day by monitoring the log on the syslog server. Adding a syslog server to the configuration will require a restart of the service.