Wazuh Proxy?
Brenno Garcia
Let's assume an agent is on an internal network, without internet access, and therefore cannot connect to the Wazuh manager.
Is there any way to monitor this machine, such as a Zabbix proxy?
My Wazuh is a Docker deployment.
hasitha.u...@wazuh.com
Hi Brenno,
If the agent cannot connect directly to the Wazuh manager, you may still be able to make it work by using a TCP proxy in between, such as HAProxy or NGINX with TCP forwarding enabled.
Agent connection reference
In this setup, the agent sends its traffic to the proxy, and the proxy forwards it to the Wazuh manager.
A Zabbix proxy is usually not suitable for this, because it is made for Zabbix communication, not for forwarding Wazuh agent traffic.
So the key point is that the proxy must support TCP forwarding.
Since your Wazuh deployment is in Docker, this may still be possible depending on your network design.
Could you share a bit more about your network setup? For example, is there any system between the internal network and the Wazuh server that could act as a TCP proxy?