Securing the agent

Started by possamai, February 21, 2008, 06:40:34 PM

Previous topic - Next topic

possamai

hi,

How secure is the nxagent?
sockstat on FreeBSD shows that port 4700 is open, but what can be done and from where does it accept connections?
I'm running it as a user now, but running it as root gives a lot more options.

How safe is it to do that?

Victor Kirhenshtein

It should be safe. Agent will accept connections only from hosts listed in configuration file. Connections from all other addresses will be closed immediatelly without sending or receiving any data. Also, you may configure agent to require additional authentication with shared secret, and to require encrypted connections.

Best regards,
Victor