Protecting Kibana on the Internet


We are thinking in putting our Kibana instance publicly, base on client IP Address, on the Internet to give access to it to our customers.

Is Kibana sufficiently secure to be putted on the Internet? Do you recommend any additional security measures?

How will you do the IP filtering?

Besides IP Filtering, I would expect you will want to implement SSL / TLS, Authentication, and Full Role Based control to provide Least Privilege to your customers so they can not view / impact other customer data. All this can be done with the correct Kibana and Elastic configuration.

Also if you are directly exposing Kibana to your customer you should perhaps make sure you are correctly licensed.

See Here :

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.