Communications Agent/Server security

[rs26]

Hi all,

I currently work on security of Zabbix. I would like to know how Zabbix agent sends data to the Zabbix server.

After doing a frames analysis, I realized that agent sends data (in hexadecimal) to server. Communications are secured ? Is it possible to forge rogue packets or analyze the traffic with MITM attack ?

Thanks in advance!

[ghoz]

zero security :
all in clear, no authentication...
for me it's also a very bad point for zabbix...

I'm not fond of that on the LAN but I can live with it.
on WAN links, it's a show stopper... i'll have to setup some kind of secure channel but haven't found a definitive answer to that... openvpn, stunel, ssh ...

[rs26]

I implement SNMPv3 if possible but for servers supervision, Zabbix Agent is more easy to use ...