1429533600 748791234 44 Secure connections to Zabbix database It is now possible to configure secure TLS connections to MySQL and PostgreSQL databases from: • Zabbix frontend • Zabbix server or proxy Restricting EnablePersistentBuffer • PersistentBufferPeriod • PersistentBufferFile Crypto libraries Support of the mbedTLS (PolarSSL) crypto library has been discontinued. JMX monitoring attributes with tabular that are unavailable in the particular configuration will be disabled. For example, the Database TLS encryption checkbox cannot be checked if using MySQL and Database host is set to localhost. See Secure

and commandline utilities when showing version information (with ’-V’ option) now also display the crypto library version. Frontend improvements • Cookie names and values are now properly URI-encoded components (server, proxy, agent, zabbix_sender and zabbix_get utilities) using Transport Layer Security (TLS) protocol. network discovery - automated discovery of network devices. low-level discovery - automated XML XPath preprocessing. net-snmp Required for SNMP support. GnuTLS, OpenSSL, LibreSSL or mbed TLS Required when using encryption. Agent Requirement Status Description libpcre Mandatory PCRE library

utilities) can now be encrypted if Zabbix is compiled with mbed TLS (PolarSSL), GnuTLS or OpenSSL library. Details are specified with new TLS parameters in daemon configuration files for Zabbix server, Zabbix and commandline utilities when showing version information (with ’-V’ option) now also display the crypto library version. Frontend improvements • Cookie names and values are now properly URI-encoded components (server, proxy, agent, zabbix_sender and zabbix_get utilities) using Transport Layer Security (TLS) protocol. network discovery - automated discovery of network devices. low-level discovery - automated

Autoregistration section accessible through the dropdown to the right. It is possible to select no encryption, TLS encryption with PSK authentication or both (so that some hosts may register without encryption while components (server, proxy, agent, zabbix_sender and zabbix_get utilities) using Transport Layer Security (TLS) protocol. network discovery - automated discovery of network devices. low-level discovery - automated XML XPath preprocessing. net-snmp Required for SNMP support. GnuTLS, OpenSSL, LibreSSL or mbed TLS Required when using encryption. Agent Requirement Status Description libpcre Mandatory PCRE library

and commandline utilities when showing version information (with ’-V’ option) now also display the crypto library version. Frontend improvements • Cookie names and values are now properly URI-encoded components (server, proxy, agent, zabbix_sender and zabbix_get utilities) using Transport Layer Security (TLS) protocol. 27 network discovery - automated discovery of network devices. low-level discovery extend Zabbix agent using the LoadModule feature /var/lib/zabbix/enc The volume is used to store TLS-related files. These file names are specified using ZBX_TLSCAFILE, ZBX_TLSCRLFILE, ZBX_TLSKEY_FILE

components (server, proxy, agent, zabbix_sender and zabbix_get utilities) using Transport Layer Security (TLS) protocol. network discovery - automated discovery of network devices. low-level discovery - automated with or without TLS. Prerequisites You will need command line developer tools (Xcode is not required), Automake, pkg-config and PCRE (v8.x). If you want to build agent binaries with TLS, you will also with TLS, install OpenSSL and/or GnuTLS: $ brew install openssl $ brew install gnutls Download Zabbix source: $ git clone https://git.zabbix.com/scm/zbx/zabbix.git 54 Build agent without TLS: $ cd

components (server, proxy, agent, zabbix_sender and zabbix_get utilities) using Transport Layer Security (TLS) protocol. 3 Agent Overview Zabbix agent is deployed on a monitoring target to actively monitor extend Zabbix agent using the LoadModule feature 56 /var/lib/zabbix/enc The volume is used to store TLS-related files. These file names are specified using ZBX_TLSCAFILE, ZBX_TLSCRLFILE, ZBX_TLSKEY_FILE extend Zabbix server using the LoadModule feature /var/lib/zabbix/enc The volume is used to store TLS related files. These file names are specified using ZBX_TLSCAFILE, ZBX_TLSCRLFILE, ZBX_TLSKEY_FILE

in Zabbix 6.0.14 Loadable plugins Encrypted MongoDB plugin connection MongoDB plugin now supports TLS encryption when connecting to MongoDB using named sessions. Updated plugin (MongoDB plugin 1.2.1) aggregation). TimescaleDB 2.11 support Support for TimescaleDB version 2.11 is now available. Configurable TLS and connection parameters in MQTT plugin The MQTT plugin for Zabbix agent 2 now provides additional default parameters: • Connection-related parameters: broker URL, topic, username, and password; • TLS encryption parameters: location of the top-level CA(s) certificate, MQTT certificate or certificate

information about a Docker container. Encrypted MongoDB plugin connection MongoDB plugin now supports TLS encryption when connecting to MongoDB using named sessions. Updated plugin (MongoDB plugin 1.2.1) components (server, proxy, agent, zabbix_sender and zabbix_get utilities) using Transport Layer Security (TLS) protocol. network discovery - automated discovery of network devices. low-level discovery - automated com/Microsoft/go- winio 0.6.0 Required package for MongoDB plugin mongo-driver lib on Windows. golang.org/x/crypto 0.0.0 golang.org/x/sys 0.0.0 golang.org/x/text 0.3.7 1 ”Indirect” means that it is used in one

validity and expiration dates of TLS/SSL website certificates. • Plugins MySQL and PostgreSQL now support encrypted TLS connection between the agent and monitored databases. TLS encryption parameters can traffic and DNS metrics via HTTP; • Website certificate by Zabbix agent 2 - native monitoring of TLS/SSL website certificates by Zabbix agent 2. You can get these templates: • In Configuration → Templates components (server, proxy, agent, zabbix_sender and zabbix_get utilities) using Transport Layer Security (TLS) protocol. network discovery - automated discovery of network devices. low-level discovery - automated