Portal access through a firewall

Hi there!
Having the default installtion of R2 on a single W2K box, what's the minimal procedure to make this configuration available through a firewall?
I've opened ports 7777-7778 but fail when trying to logon via SSO (host.domain.com:7777/pls/orasso)
Have I missed out to open another port or am I forced to follow the steps of setting up a reversing proxy to have portal-access outside the firewall?
Cheers
/Staffan

If they are on different servers, then both are listening on the 7777 port, and you will have to change one of them to use another port (assuming your firewall can only port forward a port to only one host).
If you are running both instances on the same server, then your SSO is accessible via 7777 and your midtier would be on 7778, so your setup as described should be enough (I do the same thing).
If they are running on the one machine, can you access the SSO/INF server directly? http://inf.domain.com:7777 and then http://inf.domain.com:7777/pls/orasso ?

Similar Messages

Portal Access through Internet

Dear All,
We have a requirement like the following:
We are developing a portal application. We need to access that through Intranet as well as through Internet.
The problem is that, for Internet (logged in as anonymous user), the look and feel and navigation of the pages are very different from that of Intranet, but the content is the same for both Intranet and Internet. Basically, the JSP templates are different for Internet and Intranet.
Do we need to deploy different applications to make this happen? Can we customize the navigation menu and look and feel diffently for Internet and Intranet from the same application?
Please suggest any ideas if you have.
Kind regards,
Sreejesh.

Hi Sreejesh,
if you have different JSP templates, it's up to you to create different applications (for different users? roles?! how to differentiate?) or to make the usage of the JSPs of the application itself flexible (so that the application decides at runtime which template will be used).
> Can we customize the navigation menu
In general you can customize the look and feel of the portal: System Administration -- Portal Display -- Theme Editor.
If you want to modify more than colors etc, you should consider using the LightFrameworkPage together with a sef-developed DetNav using the Navigation TagLib, see http://help.sap.com/saphelp_nw04/helpdata/en/42/ea3a29b28e1bcae10000000a11466f/frameset.htm
Hope it helps
Detlev

WAAS Cached content access through Checkpoint firewall

Hello,
I would like to open access to the cached content on the WAAS from a server through a Checkpoint firewall. The server has to have L3 access to the actual WAE device, from what I understand. Is this feasable? What ports would I need to open in the Checkpoint?
Thanks
Doug Bradfield

Hello Douglas,
You're correct, if you see an optimized connection is probably being cache ( probably not the whole file) there is a big difference between "cache data" and "preposition data" .
Cache data is not for you to control or manually retrieve from the WAE box. WAAS controls what is being cache or delete when more new data comes through.
Preposition data is something you can manually store on the Remote WAE so remote users are benefit of a faster access to files already preposition. But this is uppon remote users request to the server( Users don't know that WAAS exist they just see the server-share they've always use) so WAAS notice that a user is requesting a file that a remote WAE already got in their preposition files, so it provide faster access to the file.
Neither of this two options above will let you access WAAS content like you describe on the initial question, you said you want open access to WAE files from a server right ? you can still get the files on your server and this files can be optimazed if you server is behind the WAAS optimization path, but you'd need to go and from the server copy the files one by one just like if you were retrieving them from a client PC.
hope this helps!

Why would the finder need to be accessed through my firewall?

Recently got a message on my iMac running Mavericks asking for permission to access the Finder from outside my firewall. I have not seen this before, so wondering if anyone has the reason. I denied access thinking it may have been an outside probe from uninvited sources.

Usually, the Firewall asks for permission for an application to receive incoming communications. If you access an FTP site through the Finder, then the Firewall will need to allow the Finder to receive data.

How to monitor if portal access through browser is down

I would like to catch the alert before users report Web site not
accessible(HTTP 404). I'm thinking of an unix cron job. But what
should I querry to check the status of Portal?

In case you are still looking for responses to your question --
We've been using a product called "WhatsUp Gold" from Ipswitch
Inc. (http://www.ipswitch.com/products/whatsup/) to do
monitoring like this for the past few weeks, and so far it's
worked very well. I put a few simple "monitoring" pages on our
web servers to return the status of each of the services, then
we poll these pages every 60 seconds. If we don't get the
expected response back from any of these queries, WhatsUp sends
out emails and pages telling us what machine and what service is
down.
So far I'm polling the basic HTML service, the database
connection (mod_plsql), the servlet service, JSP, and am working
on a way to poll our report server engines and cluster
machines. (I took the "poll exactly one and only one service at
a time" approach so whenever something crashes (usually no more
than once or twice a day... <sigh>), I know exactly what piece
went down.)
- Bill

PORTAL ACCESS THROUGH HTTP and HTTPS BOTH

Hi,
Is it possible to make the portal listen on both http and https ports at the same time? What is the required configuration for the same?
Please let me know for any other details.
Any input is highly appreciated.
regards,
Chandra

Hello Chandra,
you can activate SSL in the J2EE engine and then you have both Protocolls avaliable. The documentaiton can be found at <a href="http://help.sap.com/saphelp_nw04/helpdata/en/f1/2de3be0382df45a398d3f9fb86a36a/frameset.htm">Configuring the Use of SSL on the SAP J2EE Engine</a>.
Regards
Gregor

Webmin Port Access through firewall

OSX 10.8.5
I just finsihed installing the latest version of Webmin.
Everything is working fine but I can not figure out how to allow access through the firewall GUI.
I need to open port 10000. Any suggestions?

Thanks, I posted there a few months ago, without luck. I think I've finally found something when Googling the versions of each. iChat on Leopard doesn't use newer authentication protocols and Psi would need recompiled to be compatible. If anyone is curious in the modification here you go:
http://forum.psi-im.org/thread/5091
For now I'm looking for an alternative Jabber server to use.

Printing from websites accessed through Firefox is unitelligible - just symbols, whereas fine with Safari.

For the last week or so, whenever I try to print from a website accessed by Firefox (either to pdf or printer) the resulting pages(s) are completely unitellibible -- they look like a kind of code. I have McAfee- SitAdvisor is disabeled and Firefox has full access through the Firewall. My Windows FIrewall is turned off.
When I use Safari for the same operations, everything prints fine.
Please advise.
Thanks

I also have this problem. I believe it is caused by being connected through a proxy which is adding a second compression to the data. (I think IF uses gzip compression already).
Added details:
* Opera also works.
* I can view the IF admin section on FF
* I can view the forum if I go through a web proxy.

How to allow Flash, Reader, and Shockwave installations through the firewall?

When I allow a single machine to full access through the firewall on port 80, all three products install flawlessly. I am trying to narrow this down and only open the specific IP ranges used by adobe. Does anyone know which ones need to be allowed for this to work? Also, I do know about the standalone files that can be downloaded and then installed to avoid the firewall issue, but I would like to allow all users who bring their own devices to install these products. With the below IP address open through port 80, I am able to install Flash almost every time, but Reader and Shockwave are less reliable. Thank you for any help you can provide.
Bill
23.67.250.122
23.67.250.129
23.67.250.104
23.67.250.147
23.15.7.153
23.15.7.130
23.15.7.160
23.15.7.99
23.15.7.155
23.15.7.113
23.15.8.203
23.57.1.169
23.57.3.235
23.67.250.88
23.57.2.70
8.10.179.247
66.235.147.77
96.17.160.72
96.17.160.18
192.150.16.58
192.150.16.64
193.104.215.66
199.167.187.72

I have a method that works for FLASH player, but am trying to come up with a method for the other 2 myself. To automate flash player, I created a Policy and added the following:
Under Computer Config, Prefrences, Windows Setting, Files I created a new File Item.
I set Action = Replace, Created a Source File named mms.cfg* (more below) and have the destination file as systemroot%\System32\Macromed\Flash\mms.cfg (or %systemroot%\SysWOW64\Macromed\Flash\mms.cfg for x64)
I used notepad to edit the mms.cfg, and used the following in the body:
AutoUpdateDisable=0
SilentAutoUpdateEnable=1
AutoUpdateInterval=0
My non-admin users now update flash in the background silently and automatically.

How can we allow internal users to access internet through ASA firewall?

Hello,
I am new to security track, i have been asked to setup lab and allow users from inside firewall to access internet. here is my lab setup
PC -> switch 1 (layer2) -> (inside) ASA (outside) -> switch 2 (Layer2) -> Router
does switch 2 port needs internet access through router?
what configuration required on ASA to allow users behind the firewall to access internet?
any help on this would be much appreciated.
thanks,

Hi,
Okay , can you clarify on this for me. Are you able to ping the internet from the ASA outside interface ?
Just try something like this:-
ping 4.2.2.2 .. Does this work ?
If this does not work , then i think the ASA even is not able to get to the internet and that would be a problem on the router.
Also , internet from Switch 2 is not a requirement as that is only a Layer 2 device.
You can assign the ISP allocated address on the PC , connect it to the Switch 2 port and then try to ping something on the internet or surf internet and i think that should work.
Thanks and Regards,
Vibhor Amrodia

DMS Document access through Portal

Hi Sap Gurus,
we are in the process of integrating SAP DMS with Enterprise portal 6.5, and SAP DMS on 6.0 SP 12, ie the latest Version,
when we try to access or view the documents in Portal, we could only see those which have been maintained through Easy DMS, ie.. the folders and documents created in EDMS only is visible
The Documents which are created in normal DMS, ie the document types and all the documents are not visible in Portal view. any one who have seen or managed DMS through Portal let me know can we see all the documents through Portal or only those maintained in Easy DMS,
can we avail all the funtionality in Portal to manage the documents just like we do in DMS. what are its limitation.
Pointa awaiting
Thanks and regards
Priya S

Hi,
The Kpro Tick is been given to all the document types i have configured,
i dont know if i have to enable any other KPRO feature apart from this,
if any one have made DMS and Portal integration, please let me know is Portal access is only for Document maintained by Easy DMS, or it is for all the documents of DMS, (is there any note to be implemented to avail this feature)
also we are planning to have Trex search engine for Portal file search, can this same Trex be used be for searching files inside DMS also.
Points eagerly awaiting.
Regards
Priya S
Edited by: Priya S on May 6, 2009 12:59 AM
Edited by: Priya S on May 7, 2009 10:41 AM

CIC Agent inbox access through e-portal

Hi All,
For Customer care agents, we have limitation in providing direct login access to Win Client.So i have a doubt, if we provide them access thru e-portal,will the portal directly open win client(sap gui) whenever the agent gets an inbound call?
In other terms can we have CIC implementation for Inbound telephony and have it accessed through e-portal.
Regards,
Abhinav Shahi
[email protected]

Dear Kedar Deshmukh
For Viewing DMS document throught portal you have to use "DMS Connector for KM"
for more follow the link
http://help.sap.com/saphelp_erp2005/helpdata/en/da/e40d3dbd82fe2fe10000000a114084/content.htm
Making Settings for mySAP ERP DMS Connector for KM
http://help.sap.com/saphelp_dimp50/helpdata/EN/32/2a840d132af04fa2f0b31ebf3e8a78/frameset.htm
but you have to explore for some of functionality like "create receipent list, document distribution"
Regards
Tushar Dave

Accessing portal application through NWBC (EhP5)

Can anyone shed some light on how are the portal application accessed if we want to use portal application through NWBC?
What portal applications are available... we are on EhP5...
Regards,
Harshal

Note that
The business client does not need a portal (it can but does not have to)
but NWBC can connect as well (by using the sapgui in the background-
hence sapgui needs then to be installed as well on the same client as
the NWBC) directly against the backend.
http://help.sap.com/saphelp_nw70ehp2ru/helpdata/en/31/8dd113b8ba4832aeaa
fb4b756e1eed/frameset.htm
http://help.sap.com/saphelp_nw70ehp2ru/helpdata/en/31/8dd113b8ba4832aeaafb4b756e1eed/frameset.htm
As of SAP enhancement package 5 for SAP ERP 6.0 you can choose from the
following deployment options for ESS:
Deployment Option 1: WD ABAP-Based ESS on NWBC
Deployment Option 2: WD ABAP-Based ESS on SAP NetWeaver Portal
Deployment Option 3: WD Java-Based ESS on SAP NetWeaver Portal
Activate the switch HCM_ESS_WDA_1 to use WD ABAP services
ESS Refer Note 1450179
EhP 5 ESS: The architect's view

Internet Access through TMG for all HO & Branch office

Dear Experts!,
I am new to the Forefront TMG 2010. Have requirement to implement internet access.
Head office : 192.168.11.x/24 (192.168.11.1 is the TMG server)
Branch Office 1: 192.168.12.x/24
Branch Office 2 : 192.168.14.x/24
Branch Office 2 : 192.168.16.x/24
Forefront TMG 2010 standard edition.
Having 3 NIC's two have different ISP network addresses and one has 192.168.11.1.
Branch office are connected using MPLS network, the requirement is all branch site internet must be accessed through TMG 2010 server which is homed in Head Office. How to achieve ?
What needs to be done in external firewall and in TMG for enabling internet access.
Thanks!
Regards, Ganesh, MCTS, MCP, ITILV2 This posting is provided with no warranties and confers no rights. Please remember to click Mark as Answer and Vote as Helpful on posts that help you. This can be beneficial to other community members reading the thread.

Hi Ganesh,
Hope this helps
1 - If you wish to give internet as Proxy to users.
Ensure the Below subnet is able to reach TMG Internal Interface that is 192.168.11.1
Subnet
Branch Office 1: 192.168.12.x/24
Branch Office 2 : 192.168.14.x/24
Branch Office 2 : 192.168.16.x/24
Configuration
Enable Proxy in TMG and configure Proper Ports as per your requirements
On the Client IE – Ensure you put Proxy IP as TMG and Port configured in TMG configuration.
Enable a Rule
Access Rule
Source : Internal
Destination : External
Ports : HTTP / HTTPS
Users : Authenticated Users
2 As normal Internet as Gateway to users
You need to request your MPLS provider to change the Default Route of below subnet to 192.168.11.1. By doing this, all the internet request from the below subnet to internet will hit TMG.
Subnet
Branch Office 1: 192.168.12.x/24 Default Route 192.168.11.1
Branch Office 2 : 192.168.14.x/24 Default Route 192.168.11.1
Branch Office 2 : 192.168.16.x/24 Default Route 192.168.11.1
IF you have any L3 Switch then you can also make Default gateway as L3 for all the subnet and from L3 device point it to TMG
Enable a Rule
Access Rule
Source : Internal
Destination : External
Ports : HTTP / HTTPS
Users : All Users ( Important )
Two ISP
In network Rules : You need to use NAT
You will have a Rule which NATS internal to External
On external - Choose which ISP interface should be used and Apply NAT rule

Access through internet

Hi all,
Currently we are having an mainframe application which is accessed through internet. In the website of client there is a link which navigates to this application. Once the user enter the VPN credentials it lets us to access the data.
But currently they want to integrate this application into portal. Without making portal as external facing is there a way by which they can access this application through their website ->portal.
Thanks,

you need not create a role and a page and all that.....
just create a URL iView for the Portal and preview the iview ...obtain the URL and stick that URL in your website with a proper SSL encryption....
make sure you understand the concepts of SSL and the use of web disptacher if you plan on using the portal on the internet.....also make sure you have the URL filtering so only specific URL's can be accessed via SSL...

Portal access through a firewall

Similar Messages

Maybe you are looking for