Passive active checks?

[kmradke]

I have a number of (windows) machines behind a firewall that can not directly contact the zabbix server. The server must initiate any traffic.

I'd like to enable some checks like windows eventlog processing, but it appears these must be done as "active" checks which do not work because the clients can not poll the server to see what active checks they should perform.

Is there any way to get the server to send the list of active checks instead of having the client poll for them?

Would a proxy machine help? I can't change any firewall rules to allow additional traffic.

[Alexei]

Would a proxy machine help? I can't change any firewall rules to allow additional traffic.

A proxy machine will not help in your case because proxy initiates all TCP connections.

[NOB]

I have a number of (windows) machines behind a firewall that can not directly contact the zabbix server. The server must initiate any traffic.

I'd like to enable some checks like windows eventlog processing, but it appears these must be done as "active" checks which do not work because the clients can not poll the server to see what active checks they should perform.

Is there any way to get the server to send the list of active checks instead of having the client poll for them?

Would a proxy machine help? I can't change any firewall rules to allow additional traffic.

As Alexei said: A proxy would not help.

I never did it, but a proxy might work via a reverse ssh tunnel.
You open the connection from the server to the proxy (which is allowed)
to establish a reverse tunnel (ssh -R...).

Just a thought, never tried it myself, though.
And, of course, you work around the firewall rules and, perhaps, the security regulations in the company.

Regards

Norbert.