[ Main Index | IPSentry Application Index ]
 

The IPSentry SSL Certificate Monitoring Add-In provides you with the ability to monitor various aspects of SSL certificates being hosted on specified TCP/IP port. The SSL Monitoring Add-in allows you to monitor SSL certificates on a wide variety of hosts and protocols which implement secure certificates such as SMTP/S, POP3/S, HTTP/S.

Unlike the SSL certification monitoring capabilities of the HTTP/S Enhance Web Monitoring Add-In, no page or data is requested.  Rather, the connection is released upon successful SSL negotiation allowing for certificate monitoring over a wide range of protocols and TCP port numbers..

From the Entry Editor, set the Type of entry to Add-In, click Select Add-In and select the SSL Certificate Monitor.
Click on the Configure Add-In button.

SSL Certificate Monitor Configuration - General Settings

SSL Monitor Main Configuration

After selecting to Configure Add-in from the main IPSentry Entry Editor, you will be presented with the Scripted TCP/IP Network Monitoring configuration options.

Host Address
Enter the IP Address of the host to which the SSL monitor should connect and perform SSL negotiation. 

TCP Port
Enter the port on which the remote host is listening for secure connections.

Timeout
Enter the maximum amount of time in seconds that the monitor should wait for a connection.

Ignore Connection Failure
Select this option if you don't want to be alerted to communication errors and you only want alerts triggered based on analysis of the certificate information.

Effective Date Changes
Select this option to be alerted if the certificate Effective Date attribute changes.

Version Changes
Select this option to be alerted if the certificate Version attribute changes

Issuer Changes
Select this option to trigger alerts if the certificate Issuer attribute changes.

Serial Number Changes
Select this option to trigger alerts if the certificate Serial Number attribute changes.

Subject Changes
Select this option to trigger alerts if the certificate Subject attribute changes.

Usage Changes
Select this option to trigger alerts if the certificate Usage attribute changes.

Certificate Will Expire in [n] or less days.
Select this option to trigger alerts if the certificate expiration date is within (or past) the next [n] days.

Expire Date Changes
Select this option to trigger alerts if certificate Expire Date attribute changes.


Result Format Editor
SSL Certificate Monitor Result Format Editor

When the add-in completes processing, the certificate data and result information is returned for use by the IPSentry result information keyword.  The format of the text results can be modified here.

The following keywords are utilized in the result format for this add-in component.

%%VerboseResult%%
This keyword reflects the results of general processing and will contain a verbose reason for the alert being generated.

%%HostAddress%%
Converted to the Host Address that is entered in the Host Address field.

%%HostPort%%
Converted to the Host Port that is entered in the Host Port field.

%%CertExpirationDate%%
Converted to the certificate expiration date in MMMM, dd yyyy format

%%CertEffectiveDate%%
Converted to the certificate effective date in MMMM, dd yyyy format

%%CertSubject%%
Converted to the certificate subject attribute value.

%%CertIssuer%%
Converted to the certificate Issuer attribute value.

%%CertUsage%%
Converted to the certificate Usage attribute value.

%%CertSerialNumber%%
Converted to the certificate Serial Number attribute value.

%%CertVersion%%
Converted to the certificate Version attribute value.

%%mach.description%%
Converted to the description of the entry which initiated this add-in component.

 



     If you require additional assistance, please visit our on-line support forum at http://forum.ipsentry.com.
 
┬ę1997-2012 by RGE, Inc. - All Rights Reserved
IPSentry® is a registered trademark of RGE, Inc.

 
Support Forums: http://forum.ipsentry.com
Web Site: http://www.ipsentry.com
Support Email: support@ipsentry.com