I've got a server that i need to monitor, however it is behind an ISA firewall. Any ideas on how to let Zabbix traffic through? I've tried numerous times but can't get anywhere. HELP!
-
-
Did you ever find a solution?
I'm having the same problem
-
Greetings,
Unfortuantely, I know nothing about ISA servers, but I may be able to offer a few hints.
First off the Zabbix communication is all TCP based, by default and operates on port 10050, for Server To Agent communication, and port 10051, for Agent To Server communication. Please note that these are just the defaults but they are configurable in the zabbix_agentd.conf, for the Agent, and zabbix_server.conf for the server. Additionally, if you change the port in the zabbix_agentd.conf file, you will also need to change the specific host entries in the UI.
Okay, now, when the Zabbix agent fires up, it does a normal TCP handshake with the server, on the Agent To Server port, to try to request a list of items to check and the periodicity to check. If this fails, the agent will retry this request every 60 seconds by default.
When the server finds an item to check on a remote system, it will get the hostname / IP of the agent as well as the Server To Agent port of the host to be checked. It will then initiate a regular TCP handshake with the agent.
Because of the way this works, you need to ensure that you set both the Agent To Server and Server To Agent ports to ALLOW, but only for TCP traffic. Additionally, if you are doing stateful inspection, you will need to ensure that you have the SYN and !SYN defined correctly based on the traffic flow.
Hope this helps.Comment
-
Isa
ISA... what a dog!
There is actually 3 ways to open a port and redirect it to a server, but only 1 has worked for me.
You need to add a custom port 10050 In
then create a server publishing rule, allocate the zabbix port and redirect the port to the designated server...Comment
Comment