- Restrict web UI access to trusted admin networks.
- Use HTTPS and authentication for Icinga Web 2.
- Restrict API access to admin hosts only.
¶ Authentication and Access
- Enforce strong passwords and roles.
- Limit admin privileges and audit access.
¶ Plugins and Checks
- Use only trusted plugins.
- Avoid running checks as root when not needed.
- Run Icinga as a dedicated user.
- Keep Icinga and plugins updated.
Do you need help or support? Feel free to contact us!