MId Server in DMZ

[Ragav4]

We are planning to deploy the DMZ MId Server , right now the DMZ is completed with the built process. Can someone help me to know what re the pre-requestees and pre-requirement I have to know before setting up this MID. 

I was referring to couple of documents on which they were referring to put the DMZ Mid Server inside the DMZ zone and block all the firewall ports. Could some one help me to know these requirements and also the software to be installed on the MID. 

[Jason82]

The first Discovery job will roll through all available credentials for that type and attempt to auth. It will likely trigger alerts/logs for the failed auth. Credential affinity should ensure the correct credential is used from that point on.

You can scope a credential to specific MID Server(s) using the "Applies to" fields and selecting your target DMZ MID Servers.

[Andy M1]

Regarding the OOB behavior where first round of discovery will try all available credentials until it finds a match, then creates a credential affinity record matching the Mid Server Sys_id + IP address + Credential sys_id.... 

If you really wanted to avoid the first round of alerts/incidents, you can pre-populate the credential affinity records ahead of time.  Assuming you have a single mid server in the DMZ, create one record for each IP Address (if you two, create two affinity records.  One for each Mid in the DMZ):

• Mid Server:  sys_id of the DMZ mid server
• IP Address:  IP Address of the client device to be discovered
• Credential ID:  sys_id of the credential to use for the above IP address
• Type:  string indicating the type of credential ssh, snmp, windows, etc (look at existing records to determine the appropriate type value)