I would like to see the options I have using a secure connection to the PRTG web interface.
Created on Feb 2, 2010 3:03:17 PM by
Last change on Feb 3, 2010 12:43:10 PM by
This article applies to PRTG Network Monitor Version 7.2/7.3 and 8
PRTG Network Monitor comes with a default SSL certificate so you can securely use the web interface through HTTPS out-of-the-box. This way, the connection is encrypted and no unauthorized person is able to see your data.
However, because the default certificate does not match the domain name or IP address of your PRTG installation, a web browser will always show an alert ("the certificate is not correct") when it connects to this server (although the transmission is secure).
In the PRTG Server Administrator program, you can select different security options that specify how users will connect to the web interface. The following table will give you an overview of the user's experience for the different options.
| Option | Security | User experience | Steps to take |
|---|---|---|---|
| Disable SSL | None (Passwords and account information is not encrypted. Use only in secure LANs/VPNs, do not use for PRTG installations that are publicly visible on the Internet.) | User sees no warning | In PRTG Server Administrator, set Web Server Port to "Standard" |
| PRTG's default SSL certificate | Yes (unverified) | User sees certificate warning | In PRTG Server Administrator, set Web Server Port to "HTTPS/SSL" |
| StartSSL Free certificate | Yes (Class 1) | User sees no warning - Exception: When using a private IP address to access the web interface, the user sees a certificate warning | In PRTG Server Administrator, set Web Server Port to "HTTPS/SSL" and install a StartSSL Free certificate |
| InstantSSL Free Trial certificate (90 days) - paid option for longer use available | Yes (Class 1) | User sees no warning - Specialty: Certificate can even be requested for a private IP address, so the user sees no warning when using a private IP address to access the web interface | In PRTG Server Administrator, set Web Server Port to "HTTPS/SSL" and install a InstantSSL Free Trial certificate |
| Paid extended options (e.g. StartSSL, InstantSSL, GoDaddy, etc.) | Yes, extended (up to Class 3) | User sees green address bar and site appears in browser as "verified" | In PRTG Server Administrator, set Web Server Port to "HTTPS/SSL" and install a paid certificate |
Please see the following Knowledge Base entry for step-by-step instructions and more information: How can I use a trusted SSL certificate with the PRTG web interface?
Created on Feb 2, 2010 3:03:42 PM by
Last change on Nov 12, 2010 1:51:57 PM by
If you only access your PRTG server from within your own domain, you can create your own free trusted certificate, by setting up your own Certification Authority (CA).
This CA can handout certificates that will be trusted within your own network. You have to make sure that your users can contact and trust the CA.
See this Microsoft article on how to install your own CA http://technet.microsoft.com/en-us/library/cc756120(WS.10).aspx
Created on Feb 11, 2010 7:07:22 PM by
Please log in or register to enter your reply.
Add comment