Saucepan - infoblox_nios

adp

Anonymous (anonymous@undisclosed.example.com) — 2026-02-16T02:58:58+00:00

NIOS ADP ADP Deployment Guide ADP Tuning ADP Rules Old Training Video To ensure proper performance, ADP locks 2 CPU core to process network traffic. Bear in mind that “Advanced DNS Protection” as a license also protects the protocols for: * DNS * DHCP * NTP * ICMP * BGP * OSPF Also remember that ADP can be used for internal facing

alerting

Anonymous (anonymous@undisclosed.example.com) — 2024-09-10T21:44:11+00:00

NIOS Alerting IPAM Usage Type Location Grid From the Data Management tab, select the DHCP tab -> Grid DHCP Properties Network Container From the Data Management tab, select the IPAM tab -> network_container Member From the Data Management tab, select the DHCP tab

appliance_replacement

Anonymous (anonymous@undisclosed.example.com) — 2022-11-30T11:45:40+00:00

Appliance Replacement In NIOS, when replacing an appliance, make sure you check Grid > Grid Manager > Members > Replication Status View. Make sure send queue is 0 before doing any new step.

aws

Anonymous (anonymous@undisclosed.example.com) — 2025-01-14T12:52:51+00:00

NIOS in AWS The following appliances are supported in AWS/Azure/GCP * TE-825 * TE-1425 * TE-2225 * TE-4015 * TE-4025 * TE-V5005 List of supported AWS images Network Discovery appliances are not supported in AWS. Only two interfaces are on the AWS appliances - MGMT and LAN1.

azure

Anonymous (anonymous@undisclosed.example.com) — 2025-03-07T04:36:36+00:00

NIOS Azure In Azure, when we enabled MGMT in the GM, the GUI became unavailable because it moved to MGMT and that didn't have a public IP. It could be accessed on the private IP of the MGMT interface from a bastion host. We could, without powering off the GM VM, disassociate the public IP from LAN1 and then associate it with MGMT IP. We could then access the

backup

Anonymous (anonymous@undisclosed.example.com) — 2025-07-25T15:02:05+00:00

NIOS Grid Backup When the subscription is enable DTC has its own backup schedule. When backing up NIOS, you can select * NIOS - This is NIOS configuration data for the Grid. * Discovery - This is to back up Discovery data for the Grid. * Infoblox Reporting & Analytics App (if reporting server is attached to Grid). This backs up the Splunk application reporting data and its configuration.

best_practice

Anonymous (anonymous@undisclosed.example.com) — 2024-04-03T17:01:07+00:00

NIOS Best Practice Page located here.

bloxconnect

Anonymous (anonymous@undisclosed.example.com) — 2025-03-17T15:42:12+00:00

BloxConnect BloxConnect is a useful source of telemetry to help Infoblox develop and improve NIOS (datasheet). It is recommended to enable it to improve your support experience. BloxConnect transmits once every 24 hours. Show BloxConnect Status show bloxconnect

bugs

Anonymous (anonymous@undisclosed.example.com) — 2023-10-26T11:41:34+00:00

NIOS Bugs 9.0.0 If custom Web UI TLS certificate is installed with a certain key size, GUI will be unavailable after upgrading to 9.0.0. Go to 9.0.1 or later instead. 8.6.1 Possible RPZ but that in some environments causes DNS process to core dump and restart until disk is full.

capacity_report

Anonymous (anonymous@undisclosed.example.com) — 2025-09-10T13:08:10+00:00

NIOS Capacity Report If you see that “Other” has a very high value in capacity report, it is likely to be extensible attributes. For objects that are only used for internal system operations, the report groups etc. Capacity Report on NIOS shows these under

certificates

Anonymous (anonymous@undisclosed.example.com) — 2025-05-19T09:56:59+00:00

Certificates Infoblox allows administrators to select which TLS and SSH ciphers are used by the Infoblox Grid. SSH ciphers cannot be changed directly but will be linked to the TLS ciphers enabled. Infoblox has articles on hardening SSL/TLS and SSH ciphers

cloud_network_automation

Anonymous (anonymous@undisclosed.example.com) — 2025-02-14T18:13:53+00:00

Infoblox Cloud Network Automation Documentation for DNS - vDiscovery. Documentation for CNA - CP. Create Azure Service Account. Create AWS Service Account. Create GCP Service Account. Cloud Network Automation, which includes two major components: the Grid Master that has a Cloud Network Automation license installed and one or more Cloud Platform Appliances that provide the ability to process

cloud_platform_appliance

Anonymous (anonymous@undisclosed.example.com) — 2024-10-22T19:37:35+00:00

Cloud Platform Appliance A Cloud Platform Appliance can only be configured as a Grid member, not a standalone appliance. Any Grid Primary name server become “authoritative” for the zone(s) via Cloud Platform when the CP license is installed on it, and the Grid delegates the zone to it. If the CP license was applied in error (e.g. when deploying X6) this can be resolved by removing the Cloud Platform license from the impacted member. Assume a service restart is required.

ddns

Anonymous (anonymous@undisclosed.example.com) — 2025-03-05T11:43:35+00:00

Dynamic DNS NIOS DDNS Updates are processed by the primary member, synced to GM, GM then pushes to secondaries. If GM is offline, secondaries don't get data. If Secondary if offline, GM will queue until it is back online. For NIOS-X, members proxy DDNS update to cloud, cloud processes change, cloud pushes to all NIOS-X members. Cloud only queues for a few seconds. If NIOS-X host is offline, it won't get the updates.

delegation

Anonymous (anonymous@undisclosed.example.com) — 2025-06-08T22:17:46+00:00

NIOS Delegation DNS Delegation When you create a delegation in NIOS, make sure that the “Name” of the delegated name server is the correct FQDN of the name server(s) you are delegating to (in addition to the IP addresses you set). If NIOS is authoritative for the FQDN's zone, then a

delete_member

Anonymous (anonymous@undisclosed.example.com) — 2024-04-12T14:47:26+00:00

Deleting NIOS Member If you try and delete a NIOS member that is part of DHCP, you will first need to run the following * Remove the NIOS Member from the FO association. If needed, delete the FO association. Export “DHCP Ranges”, remove all lines except the ones you want to edit, delete the content of

deploy_discovery_vm

Anonymous (anonymous@undisclosed.example.com) — 2024-08-28T11:59:46+00:00

Deploying an Infoblox Networks Discovery Server in a Lab If you are deploying NIOS 9.0 or higher, NIOS and Network Discovery use the same OVA. To deploy an Infoblox Discovery server in a lab, if you are deploying NIOS 8.6 or earlier, you will need a different OVA file from the one that you use to deploy the Grid Master/Grid Member VMs. This can be downloaded from the Infoblox support portal.

deploy_nios_vm

Anonymous (anonymous@undisclosed.example.com) — 2025-08-07T16:48:12+00:00

Deploy Virtual Infoblox Appliance Where possible, deploy all vCPU on same socket. Specifically, if you require more vCPU than you have per physical socket, it is possible that NUMA might cause performance to be sub-optimal. Specifically, it may cause issues if you are using ADP or DCA. If you are not using ADP or DCA, NUMA=1 is not needed as much.

deploy_reporting_vm

Anonymous (anonymous@undisclosed.example.com) — 2025-07-11T13:46:25+00:00

Deploying an Infoblox Reporting Server in a Lab Management If MGMT port is enabled on a Grid Member (e.g. DNS member), then the member will use the MGMT port to communicate with the reporting server (if there is a reporting server configured). Deploy NIOS Reporting VM

dhcp

Anonymous (anonymous@undisclosed.example.com) — 2026-03-24T21:22:18+00:00

NIOS DHCP For DHCP starvation prevention, the most common recommendation is to control/prevent it at the switch fabric layer. The “Disable for DHCP” option in Networks is useful when you are in the process of setting up the DHCP server. Clear this after you have configured the server and are ready to have it serve DHCP for this network.

dig

Anonymous (anonymous@undisclosed.example.com) — 2023-05-17T13:28:14+00:00

NIOS DIG NIOS has its own dig tool. By default you get a limited dig tool. You need to enter expertmode to get “normal” dig. Limited version is: dig @1.1.1.1 www.google.com A Use IPv6 Address dig @ ipv6-addr or use expertmode

discovery_network_insight

Anonymous (anonymous@undisclosed.example.com) — 2025-12-10T00:39:56+00:00

Infoblox Network Insight Basic NIOS can do basic Network Discover: Data Management > IPAM > Select network and click “Discovery”. IPv4 only and uses NMAP. The NetworkInsight license (a.k.a Discovery license) allows the Infoblox to use SNMP and other protocols to discover and catalogue a diverse assortment of device types including routers, enterprise switches, firewalls and security appliance, load balancer, enterprise printer, wireless access points, end hosts, application servers, etc.

discovery_vdiscovery

Anonymous (anonymous@undisclosed.example.com) — 2024-04-04T09:33:07+00:00

vDiscovery For NIOS vDiscovery to work with ESXi and to add DNS names to discovered objects, we need the Cloud Network Automation licence and the NIOS Grid must have the DNS zones added (even if the zones are not assigned to any appliance and even if Infoblox is not actually used for

dns

Anonymous (anonymous@undisclosed.example.com) — 2025-12-18T11:00:12+00:00

NIOS DNS Authorative zones are queriable from anywhere by default even if ACL is set to “none”. Recursive is different. When NIOS is the primary server to a load of secondary servers (e.g 40 secondary servers), it can be better to make the NIOS box that the other (e.g. BIND) devices connect to a

dns_integrety_check

Anonymous (anonymous@undisclosed.example.com) — 2023-11-14T06:29:55+00:00

DNS Integrity Check NIOS can compare its external authoritative zone data with the SOA/NS records in the parent and alert when they change (i.e. domain hijack) It does not work with a stealth master, which may limit its usefulness in the external DNS context.

dns_scavenging

Anonymous (anonymous@undisclosed.example.com) — 2023-07-17T08:54:08+00:00

DNS Scavenging It is recommended to turn on Query Monitoring to keep track of “Last Queried Time” (just logging what is queried and what is not queried). It builds data to be used later. For DNS Scavenging, when you run it/enable a schedule, do NOT enable

doh_dot

Anonymous (anonymous@undisclosed.example.com) — 2023-01-04T11:42:32+00:00

DoH and DoT Implementation guide. Note: DNS over HTTPS and DNS over TLS are not supported on Grid Master or Grid Master Candidate. DNS over TLS and DNS over HTTPS require the vDCA (virtual DNS Cache Acceleration) or vADP (virtual Advanced DNS Protection Software) service to be licensed and enabled.

dtc

Anonymous (anonymous@undisclosed.example.com) — 2025-08-24T17:02:48+00:00

DNS Traffic Control The DTC uses a MaxMind database for GeoIP information. The one that comes with NIOS is old. You can sign up for a free account with MaxMind and download the free "lite" version of the database. “GeoLite2-City” gives you city level data. Extract the GeoLite2-City.mmdb file from the tar.gz download file and upload to NIOS under Grid >

ecosystem

Anonymous (anonymous@undisclosed.example.com) — 2022-11-30T11:53:05+00:00

Infoblox Ecosystem The Infoblxo Ecosystem licence is a single, Grid wide licence that gets applied to the Grid Master. It enables the Infoblox appliances to initiate API calls to third party vendor appliances (e.g. Palo Alto Networks firewalls). Initial Setup with Palo Alto Networks

ecs

Anonymous (anonymous@undisclosed.example.com) — 2025-02-21T09:03:19+00:00

DNS ECS Grid Properties > Queries > Advanced and then enable “Recursive ECS” and “ECS Forwarding” Query Zone Permissions: By default, when ECS queries come into NIOS, NIOS will strip the ECS data when forwarding. To keep the ECS data when forwarding on a domain-by-domain basis, add the domain to the

extensible_attributes

Anonymous (anonymous@undisclosed.example.com) — 2025-08-24T16:23:21+00:00

NIOS Extensible Attributes Be careful about using Lists. The good thing about lists is that users can't enter the wrong value (like they can with String). Any time the EA is loaded, the entire back-end list must be loaded. This is true for all CRUD calls (including in the

firewall_rules

Anonymous (anonymous@undisclosed.example.com) — 2024-04-21T02:09:59+00:00

NIOS Firewall Rules Threat Insight When running Threat Insight and/or ADP on the Grid, to download the latest module updates and whitelist updates or ADP updates , the Grid Master needs to resolve and access on tcp-443. You may need to configure the proxy settings in the Grid and you may need to disable TLS inspection on the proxy.

forwarding

Anonymous (anonymous@undisclosed.example.com) — 2025-07-01T18:47:24+00:00

Forwarding In general, if you tell a DNS server to forward all queries to another DNS server (e.g. local DNS server forwards to 1.1.1.1) then you should tick “User Forwarders Only”. (Obviously, you will want more than just one IP. 1.1.1.1 & 1.0.0.1 is much more resilient than just 1.1.1.1). This is because by the time the recursive

gcp

Anonymous (anonymous@undisclosed.example.com) — 2023-08-15T08:13:36+00:00

NIOS on GCP GCP - Use Standard Persistent Disks. X6 on GCP Model VM CPUs VM Memory Image TE-926 4 32Gb n1-highmem-8 TE-1516 6 64Gb n1-highmem-16 TE-1526 8 64Gb n1-highmem-16 TE-2326 10 192Gb n1-highmem-32 TE-4126 16 384Gb n1-highmem-64

grid_join

Anonymous (anonymous@undisclosed.example.com) — 2023-11-03T12:02:07+00:00

NIOS Grid Join VPN Ports Remember, the Grid Manager/Grid Manager Candidate and Grid Members need bi-directional access to each other. * UDP-2114 - Starts VPN tunnel creation * UDP-1194 - Actual VPN tunnel. Can be configured if needed. MGMT Port

grid_master_candidates

Anonymous (anonymous@undisclosed.example.com) — 2025-10-15T13:18:59+00:00

Grid Master Candidates Marking a Grid Member as a GMC will not cause a reboot but it will cause services restart on that specific Grid Member alone because it needs to receive a complete binary database from the Grid Master and apply it rather than the partial XML database it currently has. The database switch-over involves an automated restart.

grid_restore

Anonymous (anonymous@undisclosed.example.com) — 2025-08-24T16:44:53+00:00

NIOS Grid Restore When a Grid backup, aka snapshot, is restored, you are replacing the entire database on the GM. This means all data AND settings are reverted to what was in the backup. Once the GM restarts with the “old” settings and data, ALL members will get a new snapshot of the data and configuration and they will restart as well.

gss-tsig

Anonymous (anonymous@undisclosed.example.com) — 2025-08-04T09:55:22+00:00

GSS-TSIG Guide here. Keytab File ktpass -princ DNS/infoblox.corp.local@CORP.LOCAL -mapuser svc_dns@corp.local -pass YourP@ssword123 -crypto AES256-SHA1 -ptype KRB5_NT_PRINCIPAL -out infoblox.keytab or ktpass -princ DNS/infoblox.corp.local/@CORP.LOCAL -mapuser svc_dns@corp.local -pass YourP@ssword123 -crypto AES256-SHA1 -ptype KRB5_NT_PRINCIPAL -out infoblox.keytab

high_availability

Anonymous (anonymous@undisclosed.example.com) — 2025-12-15T15:30:34+00:00

High Availability Remember, when deploying VM HA in VMware, you need to update the security settings on the port-group that is used by the Infoblox VM's to accept “MAC address changes” and “Forged transmits”. This is so that VMware allows the VM's to have multiple MAC addresses per vNIC (which is needed for Infoblox HA). Documentation

import_dns_zone

Anonymous (anonymous@undisclosed.example.com) — 2022-11-30T11:54:22+00:00

Import DNS Zone in Infoblox Say your internal resolver forwards example.com to an external DNS server that is authoratative for example.com. Say you want your internal resolver to become authoratative for this zone. * Delete the forward zone entry.

licenses

Anonymous (anonymous@undisclosed.example.com) — 2025-07-30T15:28:20+00:00

Infoblox Licenses Note that B1TD Essentials is licenced per member. If the member is a HA pair of two nodes, you only need one licence and another license for $0 will be issued. (IB-SUB-THREAT-ESNTL-HA) When you use the “set licence” command, you must to so on the CLI of the actual member that you are installing he license on (i.e. you can't use the GM CLI for all licenses)

logging

Anonymous (anonymous@undisclosed.example.com) — 2025-12-07T13:07:21+00:00

NIOS Logging Syslog Documentation Examples REMEMBER! If you have query logging enabled, if the box is busy then you can easily build up to the point where all logs only go back 1 hour and the support bundle is 3.3Gb. Query Logging Warning NIOS 9.0.7 introduced a useful warning when query/response logging is enabled (basically, don't do it unless you know what you are doing because it could have a massive impact on performance - expecially if you have configured the system to send all the log…

loopback

Anonymous (anonymous@undisclosed.example.com) — 2024-04-05T19:03:47+00:00

NIOS Loopback NIOS loopback IP addresses will not listen for DHCP (which also means they can't be used as part of a FO)

management

Anonymous (anonymous@undisclosed.example.com) — 2024-12-20T14:31:03+00:00

Infoblox Networking If you add or remove the MGMT configuration of a member, the member will reboot. Notes on configuring MGMT port The MGMT interface must be in a subnet that is separate from LAN1. If you delete a member from the Grid GUI, the member will reboot and come back up with the same IP it has.

migration_wizard

Anonymous (anonymous@undisclosed.example.com) — 2025-05-26T13:44:22+00:00

NIOS Migration Wizard To run the NIOS Migration Wizard, you may need to use a different version of Java as detailed here. By default any Linux OS use last version of openjdk that is: owner@system:~$ java --version openjdk 21.0.5 2024-10-15 OpenJDK Runtime Environment (build 21.0.5+11-Ubuntu-1ubuntu124.04) OpenJDK 64-Bit Server VM (build 21.0.5+11-Ubuntu-1ubuntu124.04, mixed mode, sharing)

misc

Anonymous (anonymous@undisclosed.example.com) — 2025-09-19T08:50:54+00:00

Infoblox Misc Set prompt to something that isn't the default Infoblox. You have to run this command on the Grid Manager and it will then apply to all members of the Grid when you SSH into them. It will be just the hostname (not the FQDN). Use the exact command below. NIOS will then use this config and will display the actual username and actual hostname when you log in to a specific system.

ms_managment

Anonymous (anonymous@undisclosed.example.com) — 2024-10-23T10:17:40+00:00

Infoblox Microsoft Management Normally, use the GMC to manage the Microsoft Management members. When you delete a MS server in NIOS, all zones synced from that MS server are removed from the Grid. Never use GM to do MS AD ID Sync. When connecting to MS servers, you should enable SSL. Import the root CA certificate and make sure you use the FQDN to connect (not the IP) as only the FQDN will match against the certificate.

network_users

Anonymous (anonymous@undisclosed.example.com) — 2026-03-03T09:58:23+00:00

Network Users First of all, check your auditing settings: In the Group Policy Management Editor, choose Computer Configuration → Policies → Windows Settings → Security Settings → Local Policies → Audit Policy Set the following audit policies:

network_views

Anonymous (anonymous@undisclosed.example.com) — 2023-04-14T05:30:33+00:00

NIOS Network Views Limit is 1,000 per Grid

nutanix

Anonymous (anonymous@undisclosed.example.com) — 2025-08-24T16:58:46+00:00

NIOS on Nutanix If customer had deployed NIOS on Nutanix and has IPv6 enabled, if they have MLD/IGMP snooping enabled on Nutanix but no RP/multicast configuration on their router (and the vSwitch was in passthrough), then the deployment would cause ND/RA to fail after a few minutes.

oci

Anonymous (anonymous@undisclosed.example.com) — 2023-08-15T08:14:43+00:00

NIOS on Oracle Cloud Instance X6 on OCI Model VM CPUs VM Memory Image TE-926 4 32Gb N/A TE-1516 6 64Gb N/A TE-1526 8 64Gb N/A TE-2326 10 192Gb VM.Standard2.8 TE-4126 16 384Gb N/A

radius

Anonymous (anonymous@undisclosed.example.com) — 2025-10-14T18:57:26+00:00

NIOS RADIUS Infoblox NIOS appliances support authentication via RADIUS servers such as FreeRADIUS, Microsoft, Cisco, and Funk. You can configure RADIUS authentication using PAP or CHAP protocols. Admin groups and privileges can be mapped from the RADIUS server to Infoblox Grid Manager.

rate_limiting

Anonymous (anonymous@undisclosed.example.com) — 2023-03-24T08:18:32+00:00

Infoblox Rate Limiting RRL = Response Rate Limiting You have to use the CLI to implment DNS rate limiting. * DNS Rate Limit is used to protect the server from being overloaded by queries (e.g. protect against DDoS attacked and amplification attacks against another system).

remote_console_access

Anonymous (anonymous@undisclosed.example.com) — 2022-11-30T12:18:26+00:00

Infoblox Remote Console Access To enable remote SSH, log into the Grid Manager, go to Grid > Grid Manager > Select Grid Properties > Security > Advanced > Tick “Enable Remote Console Access”. Click Save & Close and then wait a minute for the SSH daemon to start up.

reporting

Anonymous (anonymous@undisclosed.example.com) — 2026-03-19T22:53:50+00:00

NIOS Reporting Server A good reason to have a reporting server is DHCP lease history. This enables you to show the different MAC addresses that have all been issued a given IP address. Remember that syslog forwarding of query/response logs can have a major impact on performance.

reset

Anonymous (anonymous@undisclosed.example.com) — 2025-07-11T21:04:13+00:00

Reset NIOS Boot the box and wait for Hit "Esc" and "Enter" now for Emergency prompt, or wait 10 seconds before continuing to boot. Press both those buttons to get to the emergency prompt. You can then type reset all licenses to wipe database, configuration, network settings and licenses. Then type

setup

Anonymous (anonymous@undisclosed.example.com) — 2025-08-05T15:57:24+00:00

NIOS Setup * Enable logon message. * Enable top of page banner. * Enable Grid backup to SCP server on a schedule. * Enable NTP. * Enable RPZ logging. * Enable protection for DNS records marked as protected (prevents dynamic updates overwriting them).

sku

Anonymous (anonymous@undisclosed.example.com) — 2023-01-18T11:17:06+00:00

NIOS SKU * TE-1425-SWBSUBNS1GD-4 Trinzic 1425 Software Bundle Subscription, DDI and Grid with Infoblox Premium Maintenance-Enterprise per year. * TE-1405-HW-AC-S Trinzic 1405 w/ 1 HDD, 1 PSU-AC (Hardware only) for Trinzic 1415 and 1425 * 4-TE-1405-HW-AC-S

smart_folders

Anonymous (anonymous@undisclosed.example.com) — 2024-05-09T07:13:38+00:00

Smart Folders Smart Folders hvae a result limit of 2,000. If you want to get more from NIOS, use API. E.G. to list reclaimable DNS records (DNS Scavenging) (Note: this has to be done per zone) {{base_url}}/allrecords?reclaimable=True&zone=infoblox.com&_max_results=10000K

snmp

Anonymous (anonymous@undisclosed.example.com) — 2024-05-31T14:21:22+00:00

NIOS SNMP Remember, SNMP v3 passwords must be 8 -255 characters long. Examples sudo apt install snmp snmp-mibs-downloader Where GM is 192.168.1.1 snmpwalk -v2c -cgetSpecs 192.168.1.1 IF-MIB::ifDescr Get MTU settings snmpwalk -v2c -cgetSpecs 192.168.1.1 IF-MIB::ifMtu

sortlist

Anonymous (anonymous@undisclosed.example.com) — 2024-10-03T08:56:40+00:00

Sortlist * DNS sortlists are static and do not perform health checks. DTC does. * DNS sortlists have to be configured on each DNS Member individually. DTC allows of unified policy.

ssh

Anonymous (anonymous@undisclosed.example.com) — 2025-05-19T09:55:22+00:00

NIOS SSH When uploading a public key to NIOS for admin authentication, the file must be of the form ssh-rsa AAAAB3N......x Cipher Version See here for details on resetricting ciphers and SSL/TLS types. ssl_security_level NIOS 9.0 introduced the set ssl_security_level command

support

Anonymous (anonymous@undisclosed.example.com) — 2025-04-25T11:58:22+00:00

NIOS Support Infoblox Support Portal For an end user to request access, they need to go to * Community Request * Support Portal Request * Support Contact Information * Support Overview * Support SLA * Hardware Swap Hardware Support From Hardware Addendum in EULA. - RMA kit is Refurbished. If Customer makes a claim that Hardware has failed more than sixty (60) days after the Delivery Date, but during the Hardware Warranty Period, and Infoblox opts to replace the Hardware, …

threat_insight

Anonymous (anonymous@undisclosed.example.com) — 2025-07-30T08:41:40+00:00

NIOS Threat Insight Threat Insight NOT SUPPORTED ON TE-926 or TE-825 or TE-815 Documentation here. Add *.prod.zpath.net to Threat Insight allow list. (zScaler) During an HA failover, analytics data that is in progress on the active node might be lost. Only new

troubleshooting

Anonymous (anonymous@undisclosed.example.com) — 2026-02-16T02:58:02+00:00

Troubleshooting NIOS When downloading a Support Bundle from a NIOS HA member, the bundle will include a bundle from each member of the HA pair (assuming both nodes are online) show tech-support Can't Join Grid The following is mostly caused by the member trying to join not having an active NIOS licence.

upgrade

Anonymous (anonymous@undisclosed.example.com) — 2026-03-19T23:06:42+00:00

NIOS Upgrade First Rule Of Upgrading NIOS - Read the release notes. Then read them again. Understand what changes happen with the code and figure out if this affects your deployment of NIOS. We cannot stress this single point enough. First Rule Of Upgrading NIOS

useful_nios

Anonymous (anonymous@undisclosed.example.com) — 2025-09-23T13:10:53+00:00

Useful NIOS Commands set remote_console set maintenancemode set maintenancemode no set expertmode set expertmode no set temp_license Restart NIOS without rebooting entire appliance. set maintenancemode restart_product Show Hotfix show upgrade_history

user-id

Anonymous (anonymous@undisclosed.example.com) — 2024-10-11T13:56:06+00:00

NIOS User-ID When using NIOS Identity Mapping, you need Kerberos auditing logs to be enabled on the domain controllers to get event_id 4624, event_id 4634 plus others. event_id: 4624 identifies the user, IP address, first seen and last seen Microsoft Configuration

versions

Anonymous (anonymous@undisclosed.example.com) — 2026-03-10T20:59:16+00:00

NIOS Versions Reasons to Upgrade * You are on a version of code that is going end-of-support (see below) * You require a feature that is only available in later code * You need to patch a security vulnerability (see here) * You need to patch a bug that is affecting your production system and a hotfix isn't suitable.

vmotion

Anonymous (anonymous@undisclosed.example.com) — 2024-03-28T17:02:50+00:00

NIOS VMotion vMotion—Hot and Cold VMware vMotion migrations are supported. However, Cold migrations can result in a change in HWID and MAC Address, which invalidates the licensing. When this occurs, the licenses will need to be regenerated based on the new appliance details.