Remote Commands and Scripts - Security Best Practices

[thebossbaby]

Hello friends,

Are there any best practices when it comes to using remote commands or scripts executed via Zabbix/Zabbix-Agents in a production environment? Any 'must-do' things when approaching this from a security point of view?

[thebossbaby]

If I secure and lock down access to the Zabbix master host, will that be enough to prevent attackers from sending payloads to my monitored hosts?