Security at monitoring network

[jacobp85]

Hey

I have a Zabbix server that monitoring, all our serveres. Normally we have a VLAN with at subnet, when some servers have to communicate together.

But I think there will a security issue, if we create a VLAN/Subnet for all the monitoring data between the servers and ZABBIX-server. Then all the servers can commnicate with each other and then there is a security issue.

What should we do? Create a VLAN for every server and the ZABBIX server?

[rbenea]

Hi,

If you make the agents active, then the agents will connect to the server so the agents can be behind a NAT or on other networks. Of course you'll need the server to be accessible from outside.

Maybe this helps and you'll not need VLANs any more.

Rares

[jacobp85]

Okay. So the connect is from en agent to the server and never from the server to the client. So the agent, so not need to have ie. port 10051 Natted to the client?

Is that right?

[rbenea]

I say 95% yes. Please try and tell me too. I made a setup last year I think but I don't remember exactly how it was.

Rares

[rbenea]

So? did you get it working?