How to tunnel zabbix communications through http(s)

[dugrands]

Hi, I am not sure whether this is the best section to post my question, forgive me please if it is not.
I am monitoring many hosts that are not in our data center but in the customer's offices instead, and some of them have firewalls blocking all traffic except http(s) wheres in some, the only way to have access to the internet (ie to the zabbix server) is through proxies.
From what I understand, the Zabbix agent communicates with the server using a tcp connection and that is why I cannot monitor these hosts(all of the hosts are in Active mode only).
What I would want to know however is how can I tunnel zabbix' communications through http or better through https? I have been looking at proxytunnel but I cannot see how I can pass the messages from zabbix to the proxytunnel application. All the hosts and the servers are running on Linux by the way.

Thanks for any suggestions.

[EnigmA-X]

Easy way: request them to open ports for you
Uneasy way: use ssh and tunnel that over http(s)

However, be aware that there are many different types of firewalls and your traffic can as well be analyzed on a packet level....

[qix]

You could try to use stunnel. It encapsulates a normal tcp session in a ssl session. It needs a running stunnel instance on both side (one server and one or more clients).

[qix]

I've just setup stunnel on my Zabbix server and I'm using it to communicate with an active mode Zabbix proxy on a separate LAN (only outgoing connections allowed).

I'm not using port 443, but I'm confident it should work fine on port 443 also (as long as no other process is listening on that port, like Apache)

Hope that helps.