passive monitoring of firewalled systems

[modonnell]

We're evaluating Zabbix for use where we have clusters of
workstations (mostly Windows boxes, 3-10 per cluster) deployed at
multiple (between 100 and 1000) customer sites where we have little
control over their WAN configuration except that we can assume each
workstation has the ability to establish NAT'd outbound connections
on port 80 since that's already what HTTP typically uses.

We'd like to deploy Zabbix such that each workstation at each
site is responsible for pushing its own monitoring data back to
the Zabbix server at HQ via inbound connections initiated by each
machine as we'll not be able to initiate outbound connections from
the server since they'd be blocked at the customer's firewall.
We do *not* want to require each customer to have to open ports in
their firewalls for us.

Is this something Zabbix can do w/o requiring much surgery?

[richlv]

zabbix active agents would be what you want - they are connecting to the server.
if only port 80 is available, you might have to forward that port to zabbix traper port on the zabbix server (or somewhere before that)