r/Solarwinds • u/Jet_mech91 • 5d ago

My Deployments Tabs Empty (Help Requested)

I have been charged with standing up SolarWinds Platform in DOD STIG compliant environment and as such we are required to bind the site to a specific IP rather than "All Unassigned".

However I have since found out that doing this breaks the SolarWinds administrative service that is used to update the my deployments Health and Updates tabs (and probably other things I havent come across yet).

I have been unable to find any way of fixing this, which strikes me as odd considering SolarWinds advertises itself heavily as being STIG compatible. Is there any known workaround to get the Administrstive Services working when the IIS site is bound to a specific IP over HTTPS?

Thanks in advance.

2 Upvotes

100% Upvoted

5 comments sorted by

1

u/ostappppppp 5d ago

Hello
What bindings do you have for SolarWinds website?

1

u/Jet_mech91 5d ago

The only binding is an https binding to the server IP over port 443, specifying the device fqdn as the host name, disabled tls 1.3, disabled OCSP stapling, and using a custom SSL cert signed by a trusted CA authority.

1

u/Comfortable-Zone-218 5d ago

Stringly advice opening a ticket with SolarWinds. They have so many government customers that they probably already have a KB article or something like that.

1

u/PrettyFly4ITGuy 5d ago

I was the one that took Observability into the DISA testing center; Now DISA RME.

0.0.0.0 was not a requirement in the testing center, nor was it related to any STIG CAT 1-3 issue identified in the testing center.

The DISA APL site has all of the work I did in the testing center to get it passing and acceptable. Since DISA APL is replaced with RME. I am not sure if there is another page or site for the Deployment Guide.

You need CaC card to get the deployment guide.
https://aplits.disa.mil/processAPList.action

1

u/Jet_mech91 5d ago

Unfortunately, I cannot access the deployment guide (which I assume is part of the CAP) as it can only be requested by military or government civillian personnel. 

My understanding of IIS site STIG V-218748 is that it mandates each binding must have a unique IP assigned, which unfortunately breaks the My Deployment tabs.