How to crypt zabbix_agentd communication ?

[Stefan]

Hi,

i'm using zabbix to monitor plenty of hosts spread over the internet.
While checking the traffic the Server produces communicating with zabbix_agentd running on the Hosts i noticed some of the informations going over the wire in cleartext might be valuable for pottential attackers too.

Is there already an easy to setup/maintain solution to crypt the traffic between the Server/Hosts ?

My first idea was to use SSH tunneling or a solution like OpenVPN, but setting up those would be pretty much extra work, and wouldn't lead to a real Solution (both would require to 'change' the IP of the Hosts in my current zabbix conf)

Any help, ideas much appreciated,
Stefan

[erisan500]

A SSL implementation should be a good idea, though will need some rework on the zabbix and agents.

The best way to accomplish this is to setup VPN tunnels between your zabbix server and the remote hosts.

If commercial firewall sollutions are not possible due to a cost perspective you can allways give http://www.pfsense.org a look.

[mconigliaro]

http://www.stunnel.org/