<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic How to verify a secure connection between the deployment server and the forwarder? in Security</title>
    <link>https://community.splunk.com/t5/Security/How-to-verify-a-secure-connection-between-the-deployment-server/m-p/609212#M16279</link>
    <description>&lt;P&gt;Hi folks,&lt;/P&gt;&lt;P&gt;I have recently been testing out how to ensure the connection between my deployment server and the universal forwarders is secure. I followed the instructions and deployed a new app with some stanzas to a test windows workstation server class, via deploymentclient.conf to conform to this:&lt;/P&gt;&lt;P&gt;[deployment-client]&lt;BR /&gt;sslVerifyServerCert=true&lt;/P&gt;&lt;P&gt;caCertFile=$SPLUNK_HOME/etc/apps/&amp;lt;this apps name&amp;gt;/auth/ca.pem&lt;/P&gt;&lt;P&gt;sslCommonNameToCheck = &amp;lt;common name in DS cert&amp;gt;&lt;/P&gt;&lt;P&gt;&lt;BR /&gt;My question is how can I confirm it is connecting securely? Most of the documentation I find describes securing the indexers to forwarders, but not the deployment server to client/forwarder connection.&lt;/P&gt;</description>
    <pubDate>Thu, 11 Aug 2022 19:40:00 GMT</pubDate>
    <dc:creator>ravida</dc:creator>
    <dc:date>2022-08-11T19:40:00Z</dc:date>
    <item>
      <title>How to verify a secure connection between the deployment server and the forwarder?</title>
      <link>https://community.splunk.com/t5/Security/How-to-verify-a-secure-connection-between-the-deployment-server/m-p/609212#M16279</link>
      <description>&lt;P&gt;Hi folks,&lt;/P&gt;&lt;P&gt;I have recently been testing out how to ensure the connection between my deployment server and the universal forwarders is secure. I followed the instructions and deployed a new app with some stanzas to a test windows workstation server class, via deploymentclient.conf to conform to this:&lt;/P&gt;&lt;P&gt;[deployment-client]&lt;BR /&gt;sslVerifyServerCert=true&lt;/P&gt;&lt;P&gt;caCertFile=$SPLUNK_HOME/etc/apps/&amp;lt;this apps name&amp;gt;/auth/ca.pem&lt;/P&gt;&lt;P&gt;sslCommonNameToCheck = &amp;lt;common name in DS cert&amp;gt;&lt;/P&gt;&lt;P&gt;&lt;BR /&gt;My question is how can I confirm it is connecting securely? Most of the documentation I find describes securing the indexers to forwarders, but not the deployment server to client/forwarder connection.&lt;/P&gt;</description>
      <pubDate>Thu, 11 Aug 2022 19:40:00 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Security/How-to-verify-a-secure-connection-between-the-deployment-server/m-p/609212#M16279</guid>
      <dc:creator>ravida</dc:creator>
      <dc:date>2022-08-11T19:40:00Z</dc:date>
    </item>
  </channel>
</rss>

