[TriLUG] Redhat and Proliant DL380G3 - any issues?

[Jon Carnes]

Fortunately he's going to put his own NIC's in the box, so as long as he
sticks to main brands, he should be fine and can even ignore the
built-in NIC.

All in all the system is a bit of an overkill for just simple security
scans.  If you're beefing this up with some RAM then you might want to
run OpenNMS on the beast.. OpenNMS incorporates Nessus into its
scanning, but gives you a more complete view of your network than just
the Nessus scans.

OpenNMS is an effort to build a fully distributed network management
platform providing both enterprise and element management capabilities,
using Java 2, XML/XSL and other open source projects/tools such as
RRDTool, Nessus, Tomcat, and PostgreSQL.

Nessus described (for those needing the clue stick):
  http://www.linuxsecurity.com/feature_stories/nessusintro-part1.html

OpenNMS clue stick:
  http://www.opennms.org/

I use OpenNMS for my network monitoring (and I love it!).  Also, the
good folks that built and maintain it are members of TriLUG and have
sponsored a few meetings. :-)  

PHB plus - there is also "Enterprise" level support for OpenNMS.  So
your PHB can actually pay for support, if he is so inclined (or he can
make *you* do the support).

Take care - Jon Carnes

On Tue, 2003-12-30 at 20:15, Jason Tower wrote:
> i've installed RHAS 2.1 on that exact hardware, the only thing that 
> required any extra effort was installing nic drivers (you have to d/l 
> and build a src rpm, no big deal).  there are also a whole bunch of 
> drivers and utilities (all rpms) for snmp hardware monitoring and 
> whatnot (fans, mass storage, raid controllers, cpu temp, nics, etc).  
> the catch is that some of them are tied to a specific RH kernel, so if 
> don't upgrade the kernel without doing your homework.  and DEFINITELY 
> don't upgrade the kernel remotely or else the nic driver will fail and 
> you'll be up the creek.
> 
> jason
> 
> On Tuesday 30 December 2003 19:56, Kevin Flanagan wrote:
> > Hi all,
> >
> >
> >
> >     I'm getting ready to order the first "production" Linux system
> > for my employer.  I want it to go well so there isn't ammo for the
> > folks who would like to shoot Linux down.
> >
> >     Based on, purchasing contracts, what models we generally order,
> > and the business requirements I have determined that the HP Proliant
> > DL380 G3 is the best fit.  I'm inclined to go with Fedora Core just
> > being the most up to date.  There isn't need for the kind of extra
> > support that RHEL offers.  I could go with RH 9 if there's a reason.
> >
> >     The system will be a dedicated NESSUS scanner we intend to put
> > several NICs in it and plug it into multiple networks/VLANS so that
> > we can schedule "attacks" for the evening hours and not have the
> > security folks hanging out to all hours of the evening.   I did find
> > the little bit of addon for NESSUS that will store the results in a
> > MYSQL database and report via the web.  ;) A real selling point! 
> > Gotta to the PHB reports!
> >
> >
> >
> >     So, really 2 questions.
> >
> >
> >     1. Has anyone on the list had experience with this system and
> > either RH9 or Fedora Core 1? Good or bad?
> >
> >     2. Does anyone on the list have other things for a NESSUS server
> > that I should be looking at that they know about?
> >
> >
> >
> >
> >     Thanks in Advance!
> >
> >
> >
> >
> >     Kevin