Several Questions Concerning Configuration

[kaplan71]

Hi there --

I am considering implementing Zabbix on our network, and I had several questions concerning it:

1. If I wanted to have a connection to the server's web interface be automatically redirected from port 80 (http) to port 443 (https), will Zabbix support it?

2. I have at least one system that is in a DMZ zone. I would probably want to monitor the server via SSH. Can this be easily done?

3. If I already have network monitoring client software on a system, can I install the Zabbix client alongside the existing agent?

[RandySpinaGE]

Welcome - you will love Zabbix

assuming 1.1.x and not 1.3.x or eventually 1.4.x

1. - that re-direction is your web servers task -
Don't know if zabbix web check supports https
I check https sites with "lynx" and use a script as user parameter
lynx can even check first level log in

2. - I have systems in dmz and to open up port 10050 / 10051 is much more secure than ssh (22)

3 - as long as no other agent (client software) is using port 10050 /10051 they wont bump heads

Have fun

[James Wells]

Greetings,

1. If I wanted to have a connection to the server's web interface be automatically redirected from port 80 (http) to port 443 (https), will Zabbix support it?

Certainly does. I believe there are only a few places in the PHP where http is specifically referenced, the rest are all relative paths. As such, you can move, rename, or even re-port the UI without much difficulty.

2. I have at least one system that is in a DMZ zone. I would probably want to monitor the server via SSH. Can this be easily done?

There are a couple of ways to do this;

1. Use an SSH tunnel. Doing this, you would open an SSH tunnel to your DMZ machine, and then connect to the agent through the tunnel. Due to the IP based security that is built into the Zabbix Agent, you can restrict the Agent to listen to requests, just from the tunnel.
2. Use a scripted client. What you would do here is write a script that gets called via SSH to return the values you want checked. You would then create a script on the server that performs the SSH and calls the script. Please note that this method is rather inefficient due to the fact that you have to open a new ssh session each time you call the script, but it is doable.
3. Use a true VPN. This is the method I use. Using OpenVPN I create a private VPN connection through the firewall and configure the Zabbix Agent to listen to requests only across the VPN.

3. If I already have network monitoring client software on a system, can I install the Zabbix client alongside the existing agent?

Certainly. Additionally, if you know the communication mechanism, you can actually use some of the features of your existing monitors to extend Zabbix.

[tronite]

Hi there --

I am considering implementing Zabbix on our network, and I had several questions concerning it:

1. If I wanted to have a connection to the server's web interface be automatically redirected from port 80 (http) to port 443 (https), will Zabbix support it?

2. I have at least one system that is in a DMZ zone. I would probably want to monitor the server via SSH. Can this be easily done?

3. If I already have network monitoring client software on a system, can I install the Zabbix client alongside the existing agent?

These are just the powerful, features designed and included in zabbix. There is no reason why you should not be able to run it alongside an existing agent.