remote zabbix_agentd security options

[bill.unger]

Is it possible to force authentication from the server to the agent for security reasons?

I have agents running at remote sites with firewalls that cannot restrict port translations by IP address and am a bit concerned about leaving port 10051 open to the world. (ie., some of my remote sites have firewalls that can do this, so I limit inbound agent port requests to only those coming from my zabbix server)

Does anyone have any advice or suggestions?

tia,
Bill

[bill.unger]

Or I guess the solution would be to use Active Agents?

[james2012]

I have the same situation. IPFW is what I use to solve this problem, but any host based firewall would work.