Security

Testing firewall rules continuously with Zabbix: what should — and shouldn't — be reachable

Testing firewall rules continuously with Zabbix: what should — and shouldn't — be reachable

Network segmentation looks great on the diagram: the DMZ can’t reach the database VLAN, office workstations can’t reach server management interfaces, backups are reachable only from the backup server. Then a year passes. Someone adds a temporary “any-any” rule to debug an issue. A firewall migration converts policies slightly differently. A new VLAN is created by copying an old one.

Read More
Monitoring Wazuh agents in Zabbix via the REST API

Monitoring Wazuh agents in Zabbix via the REST API

Wazuh is a popular open-source SIEM/XDR: agents on servers and workstations collect logs, file-integrity events and vulnerability data, and send them to the Wazuh manager. It works well — as long as the agents are actually connected.

Read More