How to do Windows Zabbix Proxy?

[avmnd.com]

I have a SQL server behind the firewall on a private network segment. It is only accessible via a web server. The webserver is monitored via zabbix. Is it possible to use the webserver as a zabbix proxy with version 1.8.4?

How? Do i need to install a different service? Zabbix_get? Zabbix_send? Guess i'm not sure from the manual or other posts if this is even possible yet for windows or how to go about getting it to work. Any help would be much appreciated!

[ghoz]

Hi
If your SQL server behind firewall can access your zabbix server on port 10051, just setup an agent on the sql server and active items. that way the agent will initiate the connection and you can use the full range of checks on your server

if your sql server cannot acces outside world, and all you need is 'test that sql port is up' then the agent on the web server should be able to test the tcp port for you using net.tcp.port[<ip>,port]

other than that
* setup a real proxy that can acces the sql server and your zabbix main server
* make the web server's agent check the sql server using a userparameter and script the sql checks (you have to do everything by hand) , or script the checks on the web server and send them 'by hand' via zabbix_sender
* make the web server check the sql server using custom web page that returns the relevant information, and let zabbix get the information (watch out for security)

I guess you can make it as complicated as you want... ( or just open the outgoing connection)

[avmnd.com]

there is no route to the sql server from the zabbix server. This is because of PCI (payment card industry regulations)

[ghoz]

I was talking of a route from the sql server to your zabbix server.

I'm not familiar with PCI regulations, but if the SQL server is not alowed to talk to outside, you'll have to put a zabbix proxy inside...

In any case, you should be aware that zabbix server / zabbix agent&sender&proxy communication pass in clear, with no authentication. don't send sensitive information over the line...
you may be better off with a secure channel (vpn, stunel, ssh forward, whatever...)