Advanced Zabbix Security Administration
Advanced Zabbix Security Administration
Designed for users with knowledge about Zabbix components who want to understand security options on an expert level, this course will show how to protect Zabbix internal communications and secure sensitive information like user credentials and encryption keys. It does not require any existing Zabbix certification.
Acquired skills and knowledge
- Secure communication between Zabbix components with TLS (PSK/certificates)
- Encrypt Zabbix frontend access with HTTPS
- Secure the Zabbix environment at operating system level with SELinux
- Secure the database connections with TLS encryption
- Further protect sensitive data by setting up an external vault
- Prevent the collection of confidential metrics from monitoring endpoints
- Define user permissions and roles to restrict access to monitoring endpoints and Zabbix functions
Certificates
There is no exam after the course, but every attendee gets an official Zabbix certificate.
Training program
- Introduction
- Securing frontend using HTTPS
- Using secret user macros
- Using key vault
- Securing database connections
- Securing internal communications using psk keys
- Securing internal communications using self-signed or trusted certificates
- Restricting Zabbix agent keys
- Securing frontend with granular user permissions