1429533600 748791234 44 Secure connections to Zabbix database It is now possible to configure secure TLS connections to MySQL and PostgreSQL databases from: • Zabbix frontend • Zabbix server or proxy Restricting that are unavailable in the particular configuration will be disabled. For example, the Database TLS encryption checkbox cannot be checked if using MySQL and Database host is set to localhost. See Secure validity and expiration dates of TLS/SSL website certificates. • Plugins MySQL and PostgreSQL now support encrypted TLS connection between the agent and monitored databases. TLS encryption parameters can

components (server, proxy, agent, zabbix_sender and zabbix_get utilities) using Transport Layer Security (TLS) protocol. network discovery - automated discovery of network devices. low-level discovery - automated XML XPath preprocessing. net-snmp Required for SNMP support. GnuTLS, OpenSSL, LibreSSL or mbed TLS Required when using encryption. Agent Requirement Status Description libpcre Mandatory PCRE library you need exactly PCRE (v8.x); PCRE2 (v10.x) library is not used. GnuTLS, OpenSSL, LibreSSL or mbed TLS Optional Required when using encryption. On Microsoft Windows systems OpenSSL 1.1.1 or later is required

Autoregistration section accessible through the dropdown to the right. It is possible to select no encryption, TLS encryption with PSK authentication or both (so that some hosts may register without encryption while components (server, proxy, agent, zabbix_sender and zabbix_get utilities) using Transport Layer Security (TLS) protocol. network discovery - automated discovery of network devices. low-level discovery - automated XML XPath preprocessing. net-snmp Required for SNMP support. GnuTLS, OpenSSL, LibreSSL or mbed TLS Required when using encryption. Agent Requirement Status Description libpcre Mandatory PCRE library

components (server, proxy, agent, zabbix_sender and zabbix_get utilities) using Transport Layer Security (TLS) protocol. network discovery - automated discovery of network devices. low-level discovery - automated with or without TLS. Prerequisites You will need command line developer tools (Xcode is not required), Automake, pkg-config and PCRE (v8.x). If you want to build agent binaries with TLS, you will also with TLS, install OpenSSL and/or GnuTLS: $ brew install openssl $ brew install gnutls Download Zabbix source: $ git clone https://git.zabbix.com/scm/zbx/zabbix.git 54 Build agent without TLS: $ cd

validity and expiration dates of TLS/SSL website certificates. • Plugins MySQL and PostgreSQL now support encrypted TLS connection between the agent and monitored databases. TLS encryption parameters can traffic and DNS metrics via HTTP; • Website certificate by Zabbix agent 2 - native monitoring of TLS/SSL website certificates by Zabbix agent 2. You can get these templates: • In Configuration → Templates components (server, proxy, agent, zabbix_sender and zabbix_get utilities) using Transport Layer Security (TLS) protocol. network discovery - automated discovery of network devices. low-level discovery - automated

utilities) can now be encrypted if Zabbix is compiled with mbed TLS (PolarSSL), GnuTLS or OpenSSL library. Details are specified with new TLS parameters in daemon configuration files for Zabbix server, Zabbix components (server, proxy, agent, zabbix_sender and zabbix_get utilities) using Transport Layer Security (TLS) protocol. network discovery - automated discovery of network devices. low-level discovery - automated Building Windows agent binaries with/without TLS Overview This section demonstrates how to build Windows agent binaries from sources with or without TLS. Compiling OpenSSL The following steps will

in Zabbix 6.0.14 Loadable plugins Encrypted MongoDB plugin connection MongoDB plugin now supports TLS encryption when connecting to MongoDB using named sessions. Updated plugin (MongoDB plugin 1.2.1) aggregation). TimescaleDB 2.11 support Support for TimescaleDB version 2.11 is now available. Configurable TLS and connection parameters in MQTT plugin The MQTT plugin for Zabbix agent 2 now provides additional default parameters: • Connection-related parameters: broker URL, topic, username, and password; • TLS encryption parameters: location of the top-level CA(s) certificate, MQTT certificate or certificate

components (server, proxy, agent, zabbix_sender and zabbix_get utilities) using Transport Layer Security (TLS) protocol. 27 network discovery - automated discovery of network devices. low-level discovery extend Zabbix agent using the LoadModule feature /var/lib/zabbix/enc The volume is used to store TLS-related files. These file names are specified using ZBX_TLSCAFILE, ZBX_TLSCRLFILE, ZBX_TLSKEY_FILE extend Zabbix server using the LoadModule feature /var/lib/zabbix/enc The volume is used to store TLS related files. These file names are specified using ZBX_TLSCAFILE, ZBX_TLSCRLFILE, ZBX_TLSKEY_FILE

components (server, proxy, agent, zabbix_sender and zabbix_get utilities) using Transport Layer Security (TLS) protocol. 3 Agent Overview Zabbix agent is deployed on a monitoring target to actively monitor extend Zabbix agent using the LoadModule feature 56 /var/lib/zabbix/enc The volume is used to store TLS-related files. These file names are specified using ZBX_TLSCAFILE, ZBX_TLSCRLFILE, ZBX_TLSKEY_FILE extend Zabbix server using the LoadModule feature /var/lib/zabbix/enc The volume is used to store TLS related files. These file names are specified using ZBX_TLSCAFILE, ZBX_TLSCRLFILE, ZBX_TLSKEY_FILE

information about a Docker container. Encrypted MongoDB plugin connection MongoDB plugin now supports TLS encryption when connecting to MongoDB using named sessions. Updated plugin (MongoDB plugin 1.2.1) components (server, proxy, agent, zabbix_sender and zabbix_get utilities) using Transport Layer Security (TLS) protocol. network discovery - automated discovery of network devices. low-level discovery - automated without TLS. Prerequisites You will need command line developer tools (Xcode is not required), Automake, pkg-config and PCRE (v8.x) or PCRE2 (v10.x). If you want to build agent binaries with TLS, you will