PRTG Manual: Core & Probes

Proxy Server Handling

Define if you want to use PRTG with a direct internet connection or if a proxy is necessary. Choose between:

• Do not use a proxy server (default): Do not use a proxy. Use this setting if a direct internet connection to the PRTG core server system is available.
• Use a proxy server: Define proxy settings below. Use this setting if a proxy is mandatory in your network.

We recommend that you use PRTG with a direct internet connection.

The proxy settings are valid for auto-update, activating the product, obtaining Geo Maps tiles, and for sending HTTP, push, and SMS text message notifications.

Server

This setting is only visible if you select Use a proxy server above. Enter the address of the proxy server that you use for outbound connections. Enter a valid address.

Port

This setting is only visible if you select Use a proxy server above. Enter the port number of the proxy server that you use for outbound connections. Enter an integer.

Proxy Authentication

This setting is only visible if you select Use a proxy server above. Determine whether the proxy server needs credentials or not:

• Do not use authentication: Do not use credentials for proxy connections.
• User name and password: Define credentials (user name and password) below. Use this setting if the proxy server requires credentials.

User Name

This setting is only visible if you select User name and password above. Enter a user name for proxy authentication. Enter a string.

Password

This setting is only visible if you select User name and password above. Enter a password for proxy authentication. Enter a string.

Probe Connection IP Addresses

Define how the PRTG core server handles incoming connections from probes:

• Local probe only, 127.0.0.1 (PRTG is not accessible for remote probes): Only accept local probe connections. The PRTG core server does not allow the use of remote probes.

This is the default setting in PRTG Network Monitor.

• All IP addresses available on this computer: Accept incoming connections from remote probes, no matter on which IP address of the PRTG core server they come in.

This is the default setting in PRTG Hosted Monitor.

• Specify IP addresses: Accept incoming connections from remote probes only on the selected IP address(es) of the PRTG core server. In the list, select the IP addresses by enabling a check box in front of the desired IP addresses.

You can also change this setting in the PRTG Administration Tool on PRTG Core Server Systems.

If you change this setting, PRTG needs to restart the PRTG core server to apply your changes. After you click Save, a dialog box appears that asks you to confirm the restart. Click OK to trigger the restart. During the restart, all users of the PRTG web interface, of PRTG Desktop, or of PRTG Apps for Mobile Network Monitoring are disconnected and reconnected.

This option is not available in PRTG Hosted Monitor.

Access Keys

Enter a list of access keys for remote probe connections. Enter one access key per line.

Every remote probe that wants to connect to this PRTG installation has to use one of these keys.

For more information on how to set an access key for a remote probe, see section PRTG Administration Tool.

Allow IP Addresses

Enter a list of remote probe IP addresses or Domain Name System (DNS) names that you want to allow to connect to the PRTG core server. Enter one IP address or DNS name per line.

• [Empty]: An empty field does not allow any remote probes (only the local probe). Enter IP addresses or DNS names to allow remote probe connections.
  We recommend that you use IP addresses instead of DNS names because DNS name resolution might be cached.
• any: Enter the word any to automatically allow all remote probe connections.

This is the default setting in PRTG Hosted Monitor.
We recommend that you only use this option in intranets in PRTG Network Monitor, not in PRTG Hosted Monitor.

PRTG always automatically allows the local probe (127.0.0.1). PRTG checks the list of allowed IP addresses before it checks the list of denied IP addresses.

If the IP address of a remote probe regularly changes (for example, because of an internet provider that dynamically assigns IP addresses), enter the potential IP address range for the remote probe or use any.

You can use the PRTG syntax for IP address ranges. For more information, see section Define IP Address Ranges.

Deny IP Addresses

Enter a list of remote probe IP addresses or DNS names that you do not want to allow to connect to the PRTG core server. Enter one IP address or DNS name per line.

You can use Deny IP Addresses to explicitly deny connections from remote probes that you do not want to include in your setup either at all or for a certain time. You can also use it to allow access to an IP address range under Allow IP Addresses, but to deny access to a single IP address from the IP address range.

You can use the PRTG syntax for IP address ranges. For more information, see section Define IP Address Ranges.

If you deny the IP address or DNS name of a remote probe, you must restart the PRTG core server to apply your changes.

We recommend that you use IP addresses rather than DNS names because DNS name resolution might be cached.

Deny GIDs

Enter a list of global IDs (GID) Enter one GID per line. PRTG denies access to matching GIDs.

If you remove a remote probe from the device tree or if you deny a remote probe after installation, PRTG automatically adds its GID to this list. The remote probe is no longer able to connect. Denying GIDs is more precise than denying IP addresses, where other remote probes at the same location could also be excluded.

A GID is the ID that PRTG attributes to every probe that you include in your monitoring.

Connection Security

Specify the security level that the PRTG web server accepts for connections to and from the PRTG core server:

• High security (TLS 1.2): Only accept high security connections from probes.
• Default security (TLS 1.1, TLS 1.2) (recommended): Additionally accept TLS 1.1-secured connections from probes.
• Weakened security (SSLv3, TLS 1.0, TLS 1.1, TLS 1.2): Additionally accept TLS 1.0-secured and SSLv3-secured connections from probes.
  If you have probes that do not support TLS 1.1-secured or TLS 1.2-secured connections because you updated from an older PRTG version, you can use this setting to connect to and to update older probes. After the update, we recommend that you change this setting to High security (TLS 1.2) or Default security (TLS 1.1, TLS 1.2) (recommended).

If you set a registry key in previous PRTG versions to override the Secure Sockets Layer (SSL)/Transport Layer Security (TLS) version and cipher suites of PRTG web server connections or probe connections, High security (TLS 1.2) overrides the registry setting and only TLS 1.2 is allowed. If you select Default security (TLS 1.1, TLS 1.2) (recommended), the registry value overrides this setting and the connection security that you defined in the registry applies.

If you change this setting, PRTG needs to restart the PRTG core server to apply your changes. After you click Save, a dialog box appears that asks you to confirm the restart. Click OK to trigger the restart. During the restart, all users of the PRTG web interface, of PRTG Desktop, or of PRTG Apps for Mobile Network Monitoring are disconnected and reconnected.

This option is not available in PRTG Hosted Monitor.

Mini Probes

Define if you want to allow mini probe connections to the PRTG core server. Choose from:

• Do not allow mini probes: Mini probes cannot connect to the PRTG web server. You are not able to monitor with mini probes if you choose this option.
• Allow mini probes to connect to the PRTG web server: Mini probes can connect to the PRTG web server and use the defined TCP port for the web server for this purpose. The default port for secure connections is 443.
• Allow mini probes to connect to an extra port: Mini probes can connect to the PRTG web server via a specific port. Use this if you do not want the whole PRTG web server to be reachable from other networks all the time only because of mini probes.
  SSL/TLS must be enabled on the mini probe port.

If you want to use mini probes, you need to configure the PRTG web server to accept connections from mini probes and select Secure HTTPS server (port 443, recommended, mandatory for internet access) in the PRTG web server settings.

For more information, see section Mini Probe API. See also the Knowledge Base: Where can I find PRTG mini probes which are ready to use?

If you change this setting, PRTG needs to restart the PRTG core server to apply your changes. After you click Save, a dialog box appears that asks you to confirm the restart. Click OK to trigger the restart. During the restart, all users of the PRTG web interface, of PRTG Desktop, or of PRTG Apps for Mobile Network Monitoring are disconnected and reconnected.

This option is not available in PRTG Hosted Monitor.

Mini Probe Port

This setting is only visible if you select Allow mini probes to connect to an extra port above. Enter the number of the port for mini probe connections. Ensure that SSL is available on this port.

If you change this setting, PRTG needs to restart the PRTG core server to apply your changes. After you click Save, a dialog box appears that asks you to confirm the restart. Click OK to trigger the restart. During the restart, all users of the PRTG web interface, of PRTG Desktop, or of PRTG Apps for Mobile Network Monitoring are disconnected and reconnected.

This option is not available in PRTG Hosted Monitor.

Domain Name

To use the Azure Active Directory (Azure AD) integration, enter the name of your local domain. Enter a string or leave the field empty.

PRTG does not support trusted domains or AD subdomains. For more important notes about AD integration, see section Active Directory Integration, section Notes and Restrictions.

Domain Access

Define how PRTG performs AD queries:

• Use domain name: Use the entry in the Domain Name field above.
• Specify domain controllers: Use specific domain controllers. Specify the domain controllers below.

Primary Domain Controller

This setting is only visible if you select Specify domain controllers above. Enter the DNS name of the primary domain controller.

Backup Domain Controller (optional)

This setting is only visible if you select Specify domain controllers above. Optionally enter the DNS name of the backup domain controller or leave the field empty.

LDAP Connection Security

Define if you want to use a Secure Sockets Layer (SSL)/Transport Layer Security (TLS) secured connection to the LDAP server:

• Use LDAP without connection security: Do not use an SSL/TLS-secured connection.
• Use LDAP over SSL: Use an SSL/TLS-secured connection.

Access Type

Define which user account PRTG uses to configure Active Directory (AD) access:

• Use the PRTG core server service account (usually Local System): Use the same Windows user account configured for the PRTG core server service. In a default installation, this is the "local system" Windows user account. If this account does not have the right to query all groups of your Active Directory, do not use this option.
• Use explicit credentials: Define a user account that PRTG uses to authenticate against the Active Directory. This should be a user account with full access to all of your Active Directory groups.

PRTG uses this account to query the AD for available groups.

User Name

This setting is only visible if you select Use explicit credentials above. Enter the Windows user account name that PRTG uses to authenticate for Active Directory configuration.

Password

This setting is only visible if you select Use explicit credentials above. Enter the password for the Windows user account that PRTG uses to authenticate for Active Directory configuration.

Log File Records

Define how long PRTG keeps records in the system log file Log Database.db. Enter a value in days. PRTG automatically deletes all entries that are older than this value. This also affects the content of the Logs tab of monitoring objects like sensors.

Keep this value as low as possible to enhance system performance.

The default value is 30 days.

PRTG Web Server Log Records

PRTG creates one PRTG web server log file every day. Define how many PRTG web server log files to keep. Enter a value in days. PRTG automatically deletes all PRTG web server log files that older than this value.

The default value is 30 days.

Historic Sensor Data

Define for how long PRTG keeps historic sensor data for all sensors. Enter a value in days.

Historic sensor data is the basis for reports on monitoring data. If you decrease this value, less historic monitoring data is available.

Depending on the scanning intervals and the number of sensors in your setup, the file that contains this data can become large. For smaller installations up to 500 sensors, 365 is usually appropriate.

The default value is 365 days.

The maximum value is 9999 days.

Toplist Records

Define for how long PRTG keeps toplist records for Flow (NetFlow, jFlow, sFlow, IPFIX) and Packet Sniffer sensors. Enter a value in days. We recommend that you use 30 days here.

Old toplist data is deleted automatically as soon as a limit of 2 GB is reached. The oldest data is deleted from the database first.

The default value is 30 days.

Closed Tickets

Define for how long PRTG keeps tickets that are in the Closed status. Enter a value in days.

The default value is 365 days.

Reports

Define the maximum age for PDF reports. Enter a value in days. PRTG automatically deletes all reports that are older than this value.

The default value is 365 days.

Configuration Auto-Backups

Define the maximum age for daily configuration backups. Enter a value in days. PRTG automatically deletes all configuration backup files that are older than this value.

The default value is 365 days.

PRTG Hosted Monitor purges the configuration backups after 30 days.

Screenshots of HTTP Full Web Page Sensor

Define for how long PRTG keeps the screenshots of the HTTP Full Web Page sensor (PhantomJS browser engine). Enter a value in days. PRTG automatically deletes screenshots that are older than this value with every sensor scan.

The default value is 10 days.