System Settings · Nagios XI

General
Security
Passwords & Accounts
Theme & Display
User Accounts
Integration
Backward Compatibility

General Program Settings

Program URL:	The default URL used to access Nagios XI directly from your internal network.
External URL:	The URL used to access Nagios XI from outside of your internal network (if different than the default above). If defined, this URL will be referenced in email alerts and generated pdf reports to allow quick access to the interface.
	Automatically Check for Updates (Check Now)
	Allow HTML Tags in Host/Service Status

Timezone Settings

Timezone:

Other Settings

Write Audit Log to file:	When checked all audit log events will be written to /usr/local/nagiosxi/var/components/auditlog.log
Acknowledgement Defaults:	Sticky Acknowledgement Send Notification Persistent Comment
Autocomplete Sensitive Fields	When checked, autocompletion is enabled for sensitive fields.

Session Cookie Settings

Keep Alive:	Keep session alive while interface is open, even if user is inactive.
Session Timeout:	min Amount of time in minutes that a user remains logged in while inactive. Set timeout to 0 for unlimited. Some pages such as the operations center will not log users out for inactivity.

Two Factor Authentication (Email)

Enable Two Factor Auth:	Send an email to users after logging in to authenticate.
Two Factor Token Timeout:	min Amount of time in minutes that two factor auth tokens should expire.
Two Factor Cookie:	Allow users to choose to remember their computer/browser with a cookie.
Two Factor Cookie Timeout:	days Amount of time in days that two factor cookie should expire.

Rapid Response URL Settings

Secure Rapid Response:	Secure rapid response URL sent in notifications (users will not get automatically logged in)
Rapid Response URL Timeout:	min Amount of time in minutes before rapid response URLs time out and cannot be used.

Page Security Settings

Frame Restrictions

By default in Nagios XI 5.3.0+ all pages are not allowed to be used inside frames (frame or iframe) except by pages that are loaded from the same hostname. This addition was made to protect against clickjacking and improves the overall security of the application. This restriction is done by setting the X-Frame-Options header to SAMEORIGIN and applying Content-Security-Policy: frame-ancestors 'self'. You can add specific hosts which require a ?req_frame_access=<host> GET or POST field set when placing a page into a frame not on the same origin and will keep the set frame name for the duration of the session. You can also disable all frame restrictions.

Allowed Hosts

Disable - Do not restrict pages from being opened in iframes from anywhere. (Will not apply X-Frame-Options or Content-Security-Policy: frame-ancestors headers)

PHP cURL SSL Version

The connection type for the internal cURL call in Nagios XI to use. We default this to TLSv1.2 in 5.3.0 but can be changed to older, still secure versions only.

SSH Terminal

SSH Terminal:

Disable the SSH Terminal web portal.

Account Locking

Enable Account Lockout:	After unsuccessful login attempts, a user will be locked out of their account.
Unsuccessful Login Attempts:	Accounts will be locked after this many unsuccessful attempts to login.
Lockout Period:	Accounts will be unavailable for this period of time after a lockout. (in seconds) Enter 0 to require accounts to be unlocked by an Administrator.

Local Password Requirements

Disallow Old Passwords:	Do not allow users to re-use old passwords when changing passwords.
Enforce Requirements:	Enforce specified requirements.
Maximum Password Age:	Passwords are required to be reset after they've been in use for these many days. Enter 0 for unlimited password age.
Minimum Password Length:	Passwords are required to have at least this many characters.

Password Complexity

Enforce Complexity Requirements:	Enforce specified complexity requirements.
Minimum Uppercase Characters:
Minimum Lowercase Characters:
Minimum Numeric Characters:
Minimum Special Characters:

Theme Settings

User Interface Theme:

Display Settings

Highcharts Color Theme:
	Use Highcharts for Performance Graphs page and host/service detail pages (host/service popup graph always uses Highcharts)
Scale for Highcharts Graphs:
Default Type for Highcharts Graphs:

Data Settings (Highcharts)

Show in Legend:	Last value (Last) Average (Avg) Maximum (Max)
Calculation:	Ignore null values when calculating Avg/Max/Last values

Warning/Critical Line Display Settings (Highcharts)

Display Graph Buttons:	This will disable the warning and critical line buttons from being displayed in any graphs.
Auto Display:	This will display the warning and critical lines when an eligible graph is loaded and drawn.

General User Settings

Disable Renewal Reminder:

Disable the maintenance renewal reminder popup messages for non-admin users.

Default User Settings

Language:
Date Format:
Number Format:
Week Format:

New User Account Information Email

Update the template for email that goes out when Email User Account Information is checked (default) when adding new users.
Available macros for this template: %product%, %username%, %password%, %url%

Subject:
Body Text:	An account has been created for you to access %product%. You can login using the following information: Username: %username% Password: %password% URL: %url%

Nagios Fusion Integration

The fuse key below should be given to your Nagios Fusion 4 server only. The key allows a Fusion 4 instance to connect and integrate with this Nagios XI system.

Fuse Key:

Backend Login Settings

Allow Insecure Logins:

Allow users to use a backend ticket (and username) in a URL to log into the interface (old way of backend ticket auth). Each user has their own ticket that they can set in their profile section, much like the API key.
This option is insecure because it passes the ticket (a hash) as your password without encrypting. To be more secure, you should upgrade to single-auth tokens over SSL if possible.