How can I share the status of my network with others, e.g. other departments or management, without disclosing security sensitive data?
3 Replies
Preliminaries
First and foremost, change the default administrator login credentials (prtgadmin / prtgadmin). All PRTG installations use this default configuration and your installation will never be secure if you continue to use these settings.
If possible, use HTTPS for access to the PRTG web servers. This is controlled using the "PRTG Server Administrator" that can be found under the “Start” menu. The default SSL certificate included with PRTG’s web server is completely secure but causes web browsers to show a warning notification because it does not match the respective server’s DNS name. To avoid this you must purchase your own SSL certificate and install it on your PRTG system. See How can I use a trusted SSL certificate with the PRTG web interface? for more details.
If you intend to distribute URLs from your PRTG installation, make sure that your DNS, firewall and NAT settings allow others to access the web server (port 80 or 443 for SSL) from the outside world.
Solution: Public Maps
Your best choice is to use the “public maps” feature. This feature requires minimal configuration effort. The map can be used as a web page by itself or can be embedded in other web pages (e.g. Intranets) using IFRAMEs.
Pros: Quick to set up. You can design the layout yourself. You can use logos and a background image.
Cons: Public users can not access more information than visible on the map, i.e. they cannot “drill” into the data. Depending on your needs, this can also be an inteded feature.
Public maps are best suited for situations were only a few selected information blocks are to be published for others.
What you need to do:
- Create a new map by choosing “Map|Add Map” from the main menu.
- Enter a name of your choice and select the “Allow Public Access” radio button.
- Add map objects to the map and arrange them on the screen as desired. Click the "View Map" tab to check the final layout.
- Click on the “Get HTML” tab and you will find instructions on how to use the map’s URL directly or how to embed the map into another webpage using an IFRAME
Please have a look at the maps section of the manual for more information:
Manual section "Maps"

Created on Feb 10, 2010 10:29:44 AM by
Sebastian Bonhag
(73)
●1
●1
Last change on Feb 15, 2010 12:35:45 PM by
Daniel Zobel [Paessler Support]
(19,813)
●3
●3
Preliminaries
First and foremost, change the default administrator login credentials (prtgadmin / prtgadmin). All PRTG installations use this default configuration and your installation will never be secure if you continue to use these settings.
If possible, use HTTPS for access to the PRTG web servers. This is controlled using the "PRTG Server Administrator" that can be found under the “Start” menu. The default SSL certificate included with PRTG’s web server is completely secure but causes web browsers to show a warning notification because it does not match the respective server’s DNS name. To avoid this you must purchase your own SSL certificate and install it on your PRTG system. See How can I use a trusted SSL certificate with the PRTG web interface? for more details.
If you intend to distribute URLs from your PRTG installation, make sure that your DNS, firewall and NAT settings allow others to access the web server (port 80 or 443 for SSL) from the outside world.
Solution: Using the “Read Only User” feature
The other popular option is to create a user account that has read-only rights. You can specify exactly which objects the public user can view.
Pros: Public users can drill into the data and the sensor type. Users can thus also view reports and maps.
Cons: Larger configuration effort required. PRTG’s user interface cannot be skinned as easily as maps.
“Read Only Users” are best suited for situations where others need detailed access to data from PRTG and for access to reports.
What you need to do:
- Create a new user account (e.g. “Public User”) that will be used for public access.
- Under the heading “Account Control” are two important settings: Set the “Account Type” to “Read Only”. This setting ensures that nobody can use the public login to modify your monitoring setup.
- Choose “Create a new user group for this user” for the “Primary Group”. This new user group will be used in the settings of the various objects (groups, devices, sensors, maps, reports) to control whether the public user may see an object or not.
- After creating the new user select the objects the user may view by going to these objects’ settings pages and defining the access right for the newly created group to “read”.
- Remember that these rights are inherited to child objects, i.e. allowing the public user to “read” a device automatically allows the user to see all the device’s sensors too.
- Optional: The PRTG web pages can be adjusted (e.g. to match a corporate design) by editing the respective templates (HTML / CSS experience necessary)
- Finally, provide your users with PRTG Network Monitor access using the usual URL and the credentials set above to log in.
Created on Feb 10, 2010 10:34:16 AM by
Sebastian Bonhag
(73)
●1
●1
Last change on Feb 15, 2010 12:35:57 PM by
Daniel Zobel [Paessler Support]
(19,813)
●3
●3
Preliminaries
First and foremost, change the default administrator login credentials (prtgadmin / prtgadmin). All PRTG installations use this default configuration and your installation will never be secure if you continue to use these settings.
If possible, use HTTPS for access to the PRTG web servers. This is controlled using the "PRTG Server Administrator" that can be found under the “Start” menu. The default SSL certificate included with PRTG’s web server is completely secure but causes web browsers to show a warning notification because it does not match the respective server’s DNS name. To avoid this you must purchase your own SSL certificate and install it on your PRTG system. See How can I use a trusted SSL certificate with the PRTG web interface? for more details.
If you intend to distribute URLs from your PRTG installation, make sure that your DNS, firewall and NAT settings allow others to access the web server (port 80 or 443 for SSL) from the outside world.
Solution: Direct linking
You can link directly to specific graphs by copying the URL and providing the necessary parameters, such as width and height. In such an instance, however, you would need to provide the login data within the URL.
Go to any graph image in PRTG’s web interface, right click it and select "Copy Image URL". Add a ”username=” and “password=” parameter to the end of the URL for authentication. You shoud use the credentials of an unprivileged user, like a read-only user!
http://SERVERNAME/chart.png?type=graph&graphid=1&width=300&height=180&id=0&username=xyz&password=xyz
More
Please see also How can I use graphs from PRTG in other web pages?
Created on Feb 10, 2010 10:36:13 AM by
Sebastian Bonhag
(73)
●1
●1
Last change on Feb 15, 2010 12:36:08 PM by
Daniel Zobel [Paessler Support]
(19,813)
●3
●3
Please log in or register to enter your reply.
Add comment