Zabbix Security

[overrider]

Hello all,

How secure is the data transfer to Zabbix Server? When the individual Zabbix Agents submit their data to the Zabbix Server, i assume this happens in plaintext. So this means anyone sniffing on my LAN is able to read that data? Sure, someone is sniffing my Servers Uptime, big deal, but i still wonder if there are ways to somehow prevent the casual sniffer from reading all the things i am monitoring from my servers. I heard someone saying somehow running the Zabbix Server on a different Subnet? Hmm, dont understand that. Also, on the Zabbix Website there is a map of zabbix tracking machines in other countries, eg over the internet. Surely there this cant be going over in plain text?

Thanks for any Information

[sauron]

use stunnel or ipsec

[James Wells]

Greetings,

Yes, at present, everything is happening in plain text / XML. There are a couple of options available to help protect this data, but they all require external packages at present. I remember Alexei mentioning late last year that he intended to add an option to support SSL encryption, in the future, but I don't see it on the roadmap at present.

[overrider]

well it would defintly be very good to have all this information go over the wire encrypted.