Community
- Command Central
- MVP Program
- Monthly Mission
- Blogs
- Groups
- Events
- Media Vault
Products
- Observability
- Network Management
- Application Management
- IT Security
- IT Service Management
- System Management
- Database Management
Content Exchange
- SolarWinds Platform
- Server & Application Monitor
- Database Performance Analyzer
- Server Configuration Monitor
- Network Performance Monitor
- Network Configuration Manager
- SQL Sentry
- Web Help Desk
Free Tools & Trials

Mobile View Outside the Internal Network

I'm wondering if anyone is using Mobile View outside of the corporate network for iPhones, Droids, etc. I can see how it would work if you connect by VPN from a device, but it would be more flexible if you could securely publish Orion NPM out a firewall or proxy server. Is anyone doing that, and if so can you share how you are handling access and security issues? Would you just configure anonymous access, or allow anyone on the Internet to try authenticating against your Orion web site (local accounts and/or AD integrated accounts)?

Jeff

Find more posts tagged with

npm_mobile_view_internet

Accepted answers

All comments

bshopp

What I have seen other users do is purchase an additional web server, place that in their DMZ and open the needed ports for the web console to communicate with Orion and then hit that outside of the office for the mobile views.

Jeff_Salisbury

That's a possibility and I guess the $495 isn't terribly expensive, but you could probably also just use a Proxy like Microsoft ISA to act as an intermediary. My question really revolves around how you handle authentication from Internet side devices. If you are using AD integration like we are, there is the potential for the bad folks out there to start causing account lockouts (assuming you have lockouts after a set number of failed authentications), or do worse things if you don't have lockouts enabled.

I'm hoping someone with real world experience can chime in with what they are doing regarding authentication. Thanks!

Jeff

FormerMember

To access externally on mobile devices we deployed our Orion Web Front end in our secure DMZ Web App environment via https. We secure and encrypt the communications by offloading the SSL certs. on our Netscalers which the Web interface sits behind. We use encrypted AD authentication for secure access.

netlogix

I use black berry server to offer internal content, so it isn't really published publicly. but if you aren't using BES, you could set up a VPN from the mobile device and access it that way. Then you would have to have VPN credentials (even if it were a static password or a certificate) before you could attempt AD authentication.