SSL TLS v1.2 and windows Agent

[BartTechne]

I enabled PSK with the keys + Keyfile but i keep getting:


Get value from agent failed: TCP successful, cannot establish TLS to [[127.0.0.1]:10050]: SSL_connect() I/O error: [0] Success

I do get all the values from the agent. Even the active checks.

Anyone has an insight ?

[Atsushi]

Is the IP address of the Windows running Zabbix Agent not "127.0.0.1"? Check the host interface settings.

[BartTechne]

Is the IP address of the Windows running Zabbix Agent not "127.0.0.1"? Check the host interface settings.

Do you mean in the .conf file of windows ?

[Atsushi]

No. Windows host setting on Web front end for Zabbix.

[BartTechne]

It is 127.0.0.1.

[Atsushi]

127.0.0.1 is the IP address of the local loopback, so it can only communicate within that server. If you try to access 127.0.0.1 from the Zabbix server, you will not be able to monitor Windows as it will try to connect to the process in the Zabbix server.

In order to access Windows server from Zabbix server, it is necessary to use an IP address that can communicate with other servers. For example, it is necessary to specify the IP address used for communication with other servers, such as the IP address of Zabbix server 192.168.1.1 and Windows 192.168.1.2.

[BartTechne]

Atsushi
So this means, if we want to use PSK we need to open the firewall on site ? So that it can communicate with the Zabbix server wich is not on prem with PSK ?

[Atsushi]

If you want to do a passive check, you need to be able to connect to the Windows side from the Zabbix server side. If you only need active check, you can monitor if the Windows server can connect to the Zabbix server. In that case, the item type of monitoring should be only active check.