Monitor open ports from an external host

[matt.envsys]

Hi there,

We're looking to monitor several of our hosts for open ports. So far I've followed this blog to scan for open ports on the host machine but we would also like to monitor for open ports from 'the other direction'.

Is it possible to create a new host in Zabbix to scan a targeted machine for open ports externally?

Thanks

[Kevin28Devoe]

Hello!
Yes, you can monitor external host open ports in Zabbix without an agent by creating a new host and using "Simple check" items with the net.tcp.port[<ip>,<port>] key. Define the target IP and port number in the item's key. Zabbix Server will then directly check the port status. You can also add ICMP ping checks for host reachability and create triggers to generate alerts when a port is not open. Be mindful of firewall rules and the potential load on your Zabbix infrastructure when monitoring many external hosts and ports.

[cyber]

For scanning other hosts, you need tool like nmap. https://nmap.org/
This previous chatgpt answer here is not essentially wrong, but requires you to know, what ports to check, but it is not a scan of ports...

[vijayk]

matt.envsys as cyber said you need nmap to check the external ports.
You can also refer below link. it might helpful to you.

https://www.zabbix.com/forum/zabbix-cookbook/470024-automatic-nmap-scanning