Monitor devices in a different network

[Zabbix_Julian]

Hello all!

I'm facing the challenge of implementing monitoring for Point-of-Sale (POS) systems in various locations. Unfortunately, these locations lack direct access to the Zabbix Server, leading to issues with the current monitoring setup.

I'm seeking the best method to establish this in a simple and effective manner. Are there any proven approaches or best practices that you can recommend? How can I ensure monitoring for POS devices that cannot directly access the Zabbix Server?

I would greatly appreciate your assistance and advice on this matter.

Thank you in advance!

[PeterZielony]

something would have to be exposed - either server/proxy or host itself.

in POS environment I guess you have multiple different locations so it would make sense to create a publicly accessible Zabbix proxy - but you need to make sure you secure it properly with TLS/SSL etc.

Alternatively, use virtual networks (VPN). I used to use something called ZeroTier to enable secure tunnelling between POS endpoints and Zabbix proxy on the other end (but this is a paid solution and more complex in general).

[djmuk]

I monitor multiple sites...

I have a central mikrotik OVPN server which is the ONLY publically exposed service.
I then have a Mikrotik OVPN client on each site (per site username/password) which 'dials home' to the central server.

I then use Src/dest NAT and netmap NAT and routing to allow remote access to each site from the centre, this also eliminates any issues with sites having the same IP range.

this works both for passive hosts (EG SNMP) and Active hosts (Zabbix agent).

[Zabbix_Julian]

Hello all,

thank you for your support!
I fixed it now by setting up a public port in my nginx + configuring stream on it.