Connect HTTP using web interface behind firewall

[richard21]

Hi,

Is it possible to change the way the random port no's are generated when connecting to a device using HTTP or HTTPS when using the Web client as this doesn't work when the webserver is behind a firewall with only port 443 open

Regards
Richard

[Filipp Sudanov]

Hi,

Can you clarify a bit - are you using an object tool, or something else? Is it so that firewall on your webserver machine wants outgoing connections to be from port 443?

[richard21]

Hi Filipp,

The issue is the Netxms Server is behind a firewall and when accessing it externally using the web interface and try and use the below object tool to connect to the Web interface on a monitored node it launches the web browser but tries to connect to https://NetxmsWebRL:35569/ the port no is random (this works when using the full client it only affects the web Interface) the object tool is configured as below
URL: https://${local-address}:${local-port}
with setup TCP tunnel to remote port enabled

Cheers
Richard

[Filipp Sudanov]

Currently not supported, but theoretically it could be implemented to choose port number from a specific range. However, this is not good approach from security standpoint as if you are opening these ports to the Internet anyone else could have access to what's exposed on these ports.

More advanced way would be to use WebSockets so that browser would open a port on localhost, but this might be complex to implement and I am note sure if this fits with current framework on which the client is based.

Have you considered using some sort of VPN to access your server instead of a forwarded port?

[richard21]

Hi Fillipp,

thanks for the reply I'll look at another method of access probably based around a VPN

Regards
Richard