That's very much like the situations I find myself in, except I tend to work with small businesses that have a handful of dedicated servers or cloud instances, such as Rackspace, GoGrid, EC2, or dedicated servers at companies like Hivelocity, Razor Servers, LiquidWeb, etc. It's a little more difficult in those cases to handle unless they also have a virtual dedicated network of some kind. In those cases I consider either a host based VPN connection back to a central monitoring node / network, or some special host firewall rules to only allow incoming SNMP from my monitoring stations. Or... as per my last thread, I'd just use an agent on the hosts that sends information directly back to my monitoring stations encrypted.
↧