I bet the official answer will be something like, "Installation of anything on the system that is not part of the MWG distro is unsupported and may void your warranty."
I started looking at installing NRPE, but haven't had the time to compile it so that it doesn't have dependencies on other things that aren't on the system by default.
you are right. Every custom compiled component added to what we ship is not tested and noone can guarantee that there will be no problem. The MLOS is customized to run stable and deliver good performance. Adding additional software might cause conflicts or other problems, so McAfee does not allow to install additional software and will require customer to remove unsupported software or re-image the platform in case problems occur and the operating system has been touched.
On 7.3 you could install Zabbix pretty easily by using existing RPM packages:
rpm -Uvh zabbix-1.8.16-1.el6.x86_64.rpm zabbix-agent-1.8.16-1.el6.x86_64.rpm
However this should be used for testing only, since the above statement about supportability is still true. For official support please file an FMR: https://kc.mcafee.com/corporate/index?page=content&id=KB60021
Thanks Andre, it "is" what I assumed but I needed to ask. SNMP monitoring of my web gateways has always resulted in spotty results, across different release trains and hardware. We monitor a few hundred devices with our box and the MWG's are the only devices that have holes in their graphs. If we use the Zabbix agent it will run the SNMP queries locally and report back the results, hoping for more consistency.
yeah I understand the concern. So I recommend to file the FMR and hope for official support. I know that we have some customers who are pretty happy that the appliance is basically a plain "linux" and you can add some additional software. And I know customers that install custom software and usually there is no need to worry. I personally (as an administrator) would install it, as long as it is a small piece of agent software. I won't install an AV solution or a database on top, but well.
The major concern is supportability here. If we receive a call from support and we see there is something customized installed we usually assume that this could "harm" the system, since everything else is tested and known to work, since it is globally used around the world. So the first answer would we "remove the software" or even "re-image the box" and check if the issue persists. That is simply because we cannot test and support every software available, so we (at least I) can't give official permission since no one knows what could happen. Installing a custom package could overwrite a library or whatever.
It is not that the complete warranty is lost or that you can't call support any longer, the "not supported" means that we only take responsibility for what we deliver. If (for example) the appliance OS is updated, this kills the Zabbix agent, this causes Zabbix to report alerts on all your MWG, this calls the complete "emergency network oepration team" and causes them to spend 2 days on troubleshooting until you noticed that only the agent is dead -> we won't pay :-)
Thanks for the input. As I said before I figured it would fall into this category but it's always worth asking.
Did it work? No, the agent requires some libraries to be updated that are currently in use by MWG from what I can tell and it's not worth breaking the one to fix the other.
Maybe down the road, or on another release train, the compatibility will be there. Thanks!
[root@mwg-lab tmp]# rpm -Uvh zabbix-1.8.16-1.el6.x86_64.rpm
warning: zabbix-1.8.16-1.el6.x86_64.rpm: Header V3 RSA/SHA256 signature: NOKEY, key ID 0608b895
error: Failed dependencies:
rpmlib(FileDigests) <= 4.6.0-1 is needed by zabbix-1.8.16-1.el6.x86_64
rpmlib(PayloadIsXz) <= 5.2-1 is needed by zabbix-1.8.16-1.el6.x86_64
[root@mwg-lab tmp]# rpm -Uvh zabbix-agent-1.8.16-1.el6.x86_64.rpm
warning: zabbix-agent-1.8.16-1.el6.x86_64.rpm: Header V3 RSA/SHA256 signature: NOKEY, key ID 0608b895
error: Failed dependencies:
libc.so.6(GLIBC_2.7)(64bit) is needed by zabbix-agent-1.8.16-1.el6.x86_64
liblber-2.4.so.2()(64bit) is needed by zabbix-agent-1.8.16-1.el6.x86_64
libldap-2.4.so.2()(64bit) is needed by zabbix-agent-1.8.16-1.el6.x86_64
rpmlib(FileDigests) <= 4.6.0-1 is needed by zabbix-agent-1.8.16-1.el6.x86_64
zabbix = 1.8.16-1.el6 is needed by zabbix-agent-1.8.16-1.el6.x86_64 (this wouldn't be here if the first piece installed)
rpmlib(PayloadIsXz) <= 5.2-1 is needed by zabbix-agent-1.8.16-1.el6.x86_64
on 4/15/13 11:37:04 AM CDT
which version of MWG are you running? In 7.3.1 the Zabbix Agent RPMs installed just fine. Maybe you are running 7.2, then you probably need an older RPM that refers to the right library versions. In case warnings occur you certainly don't want to install the RPM :-)