Hi Michael,
Thanks for reply.
This is for scenario :
Server#1 : Observium Web server
Server#2 : Database server
How to make sure that, in Observium systems ( Web ) , database Security Server ( DB ) , TCP database port uses TLS v1.2
or above for communications.
This is to ensure communication is secured.
Could share with us information if any.
Thank you.
Regards
Ryan
From: observium <observium-bounces@observium.org>
On Behalf Of Michael via observium
Sent: Monday, 4 April 2022 11:08 am
To: Observium <observium@observium.org>
Cc: Michael <obslist@smarsz.com>
Subject: Re: [Observium] Observium - database Security Server and TCP database port uses TLS v1.2 or above for communications
I'd argue that it is pretty much irrelevant in this scenario.
As your database is on the same box as the Observium process, there's no cleartext data being transmitted across the network, which is what that control is designed to address.
If the data is considered sensitive enough, you should probably looking to also encrypt the data at rest within the database (as you would have needed to already compromise the Observium host in order to abuse the above scenario, you've
got access to the database regardless). That's a slightly different rabbit hole to fall into.
Michael