Subscriber Discussion

Do You Or Your Customers Use SNMP To Monitor Security Systems?

Avatar
Josh Hendricks
Oct 22, 2016
Milestone Systems

It appears support for SNMP is deprecated in Microsoft Server 2012 and 2012 R2, and it is not yet mentioned one way or the other for Server 2016.

Does anyone here make regular use of SNMP for system monitoring? If so, and if you are monitoring Windows-based systems, what will you do when Microsoft remove support entirely?

What other systems do you use for system health monitoring/alerting?

Avatar
Ethan Ace
Oct 22, 2016

I believe the service is still available, just not installed by default. That's what this PRTG knowledge base article implies: https://kb.paessler.com/en/topic/49593-getting-snmp-to-work-on-windows-server-2012

Related: we are running SNMP on several Windows 10 machines, and when the big service release installed a couple weeks back, it uninstalled SNMP, strangely. But it was still available. I wonder if the two are related.

Avatar
Josh Hendricks
Oct 22, 2016
Milestone Systems

That's a good question, I have heard of Windows Updates mysteriously removing IIS as well so I would guess it was just a fluke.

SNMP can still be used in Windows for now and our software (Milestone) supports sending SNMP traps, but I'm curious how common it is used outside of VMS - for access control, building management, alarm systems, etc, and if integrators themselves are involved in the setup/use of it.

It don't see it used much outside of some IT departments, mainly the network infrastructure teams as it seems to have been borne out of the need to monitor/manage large numbers of switches and routers.

SN
Simon Nazaretian
Oct 23, 2016

I don't imagine that there are many integrators out there that use SNMP on a regular basis for two reasons: the initial barrier to entry that requires that an integrator learn about SNMP, its deployment and use, then comes actually configuring the monitor sets to get actionable information.

In my experience most people that try to deploy SNMP get an initial barrage of notifications from the network, and unless they are committed to putting the time and effort in to actually configuring what is being monitored / alerted it gets dropped relatively soon or just ignored. Yes I know, there are some platforms that reduce deployment, and configuration time required to get actionable information, but then this creates a third barrier - cost. There are very few integrators that I know of that charge for proactive maintenance of CCTV networks on a monthly basis (I don't know why, btw) so they would have to roll in the cost of setting up the SNMP system during the initial install (and choose a platform with no recurring costs).

I assumed that what I describe above was widely known by VMS manufacturers and that is why some have attempted to develop "health monitoring" functionality to provide integrators with notifications that they will actually care about: camera up/down, Gateway up/available, VMS server CPU/RAM/Network parameters within acceptable tolerances, etc. To make things simple for integrators.

Wasn't this Viakoo's, and other such platforms, business proposition?

SNMP is much more heavily used in the IT space then in physical security (given that most MSPs use these kinds of tools to monitor the environments they manage), but even there it take time to get it right. Most modern IT companies (specifically MSPs) will also be using multiple tools - SNMP + an RMM tool, or in our case (with Kaseya) an RMM tool that integrates SNMP functionality. Combining these tools allows for single pain of glass monitoring, maintenance, and remediation capabilities.

If you are a VMS manufacturer or a large enough integrator choosing a good RMM tool can do wonders for supporting IP based systems - couple that with a good documentation platforms (like ITGlue) and you can get a single support technician supporting hundreds of IP based access control and CCTV systems.

(1)
(1)
MM
Michael Miller
Oct 23, 2016

Support automation using SNMP is a major priority for us. Every server that we install gets an SNMP probe installed on it and we get tickets pushed into Connectwise when there is an issue. My service team can also monitor real-time status from all systems from their cell phones. Our goal is to do more with less so we can be more efficient and support our customers faster.

(1)
New discussion

Ask questions and get answers to your physical security questions from IPVM team members and fellow subscribers.

Newest discussions