On Monday 15 January 2007 16:36, W. Chris Shank wrote: > Is this in the roadmap? > > What is the best way to get the most out of Zenoss without opening up > remote servers to potential security problems with SNMP? And what exactly are those potential security problems with SNMP? When implemented right, SNMP is the right protocol to be used for monitoring. Just setup snmp daemon for ro only comunity, deny all rw requests, use snmp v3 for privacy of the connection, and you should be ok. Oh, yes, you could use a little help from iptables for extra security on the OSI layer 4. SSH IMHO adds a lot of overhead both for the monitoring system and the monitored machine.
Regards, Dimitar G. Katerinski -- http://tropot.net/photoblog/ - my life. in pictures. _______________________________________________ zenoss-users mailing list [email protected] http://lists.zenoss.org/mailman/listinfo/zenoss-users
