utilities) can now be encrypted if Zabbix is compiled with mbed TLS (PolarSSL), GnuTLS or OpenSSL library. Details are specified with new TLS parameters in daemon configuration files for Zabbix server, Zabbix components (server, proxy, agent, zabbix_sender and zabbix_get utilities) using Transport Layer Security (TLS) protocol. network discovery - automated discovery of network devices. low-level discovery - automated Building Windows agent binaries with/without TLS Overview This section demonstrates how to build Windows agent binaries from sources with or without TLS. Compiling OpenSSL The following steps will

components (server, proxy, agent, zabbix_sender and zabbix_get utilities) using Transport Layer Security (TLS) protocol. 3 Agent Overview Zabbix agent is deployed on a monitoring target to actively monitor extend Zabbix agent using the LoadModule feature 56 /var/lib/zabbix/enc The volume is used to store TLS-related files. These file names are specified using ZBX_TLSCAFILE, ZBX_TLSCRLFILE, ZBX_TLSKEY_FILE extend Zabbix server using the LoadModule feature /var/lib/zabbix/enc The volume is used to store TLS related files. These file names are specified using ZBX_TLSCAFILE, ZBX_TLSCRLFILE, ZBX_TLSKEY_FILE

components (server, proxy, agent, zabbix_sender and zabbix_get utilities) using Transport Layer Security (TLS) protocol. 27 network discovery - automated discovery of network devices. low-level discovery extend Zabbix agent using the LoadModule feature /var/lib/zabbix/enc The volume is used to store TLS-related files. These file names are specified using ZBX_TLSCAFILE, ZBX_TLSCRLFILE, ZBX_TLSKEY_FILE extend Zabbix server using the LoadModule feature /var/lib/zabbix/enc The volume is used to store TLS related files. These file names are specified using ZBX_TLSCAFILE, ZBX_TLSCRLFILE, ZBX_TLSKEY_FILE

components (server, proxy, agent, zabbix_sender and zabbix_get utilities) using Transport Layer Security (TLS) protocol. network discovery - automated discovery of network devices. low-level discovery - automated XML XPath preprocessing. net-snmp Required for SNMP support. GnuTLS, OpenSSL, LibreSSL or mbed TLS Required when using encryption. Agent Requirement Status Description libpcre Mandatory PCRE library you need exactly PCRE (v8.x); PCRE2 (v10.x) library is not used. GnuTLS, OpenSSL, LibreSSL or mbed TLS Optional Required when using encryption. On Microsoft Windows systems OpenSSL 1.1.1 or later is required

components (server, proxy, agent, zabbix_sender and zabbix_get utilities) using Transport Layer Security (TLS) protocol. network discovery - automated discovery of network devices. low-level discovery - automated with or without TLS. Prerequisites You will need command line developer tools (Xcode is not required), Automake, pkg-config and PCRE (v8.x). If you want to build agent binaries with TLS, you will also building with TLS, install OpenSSL and/or GnuTLS: $ brew install openssl $ brew install gnutls Download Zabbix source: $ svn export svn://svn.zabbix.com/trunk zabbix-source Build agent without TLS: $ cd

Autoregistration section accessible through the dropdown to the right. It is possible to select no encryption, TLS encryption with PSK authentication or both (so that some hosts may register without encryption while components (server, proxy, agent, zabbix_sender and zabbix_get utilities) using Transport Layer Security (TLS) protocol. network discovery - automated discovery of network devices. low-level discovery - automated XML XPath preprocessing. net-snmp Required for SNMP support. GnuTLS, OpenSSL, LibreSSL or mbed TLS Required when using encryption. Agent Requirement Status Description libpcre Mandatory PCRE library

1429533600 748791234 44 Secure connections to Zabbix database It is now possible to configure secure TLS connections to MySQL and PostgreSQL databases from: • Zabbix frontend • Zabbix server or proxy Restricting that are unavailable in the particular configuration will be disabled. For example, the Database TLS encryption checkbox cannot be checked if using MySQL and Database host is set to localhost. See Secure validity and expiration dates of TLS/SSL website certificates. • Plugins MySQL and PostgreSQL now support encrypted TLS connection between the agent and monitored databases. TLS encryption parameters can

components (server, proxy, agent, zabbix_sender and zabbix_get utilities) using Transport Layer Security (TLS) protocol. network discovery - automated discovery of network devices. low-level discovery - automated with or without TLS. Prerequisites You will need command line developer tools (Xcode is not required), Automake, pkg-config and PCRE (v8.x). If you want to build agent binaries with TLS, you will also with TLS, install OpenSSL and/or GnuTLS: $ brew install openssl $ brew install gnutls Download Zabbix source: $ git clone https://git.zabbix.com/scm/zbx/zabbix.git 54 Build agent without TLS: $ cd

validity and expiration dates of TLS/SSL website certificates. • Plugins MySQL and PostgreSQL now support encrypted TLS connection between the agent and monitored databases. TLS encryption parameters can traffic and DNS metrics via HTTP; • Website certificate by Zabbix agent 2 - native monitoring of TLS/SSL website certificates by Zabbix agent 2. You can get these templates: • In Configuration → Templates components (server, proxy, agent, zabbix_sender and zabbix_get utilities) using Transport Layer Security (TLS) protocol. network discovery - automated discovery of network devices. low-level discovery - automated

TLSAccept 是, 如果 TLS certificate 或 PSK 参 数都进行了定义 (即使 是未加密的连接), 否则 为否 Zabbix server 能 接受哪些 接方 。 参数仅用于被动 proxy。 可以指定多个值，以逗 号分隔： 未加密接受无加密的连 接（默认） // psk // - 接受与 TLS 的连接和预共享密钥 （PSK） // cert // - 接受与 TLS 和证书的连接 和证书的连接 从 Zabbix 3.0.0 开始 支持该参数。 61 TLSAccept yes, if TLS certificate or PSK parameters are defined (even for unencrypted connection), otherwise no What incoming connections to accept from Zabbix server connections without encryption (default) psk - accept connections with TLS and a pre-shared key (PSK) cert - accept connections with TLS and a certificate This parameter is supported since Zabbix 3.0