topic Re: Harmony Connect On-premise natting and block Gaia Portal access in Endpoint

Harmony Connect On-premise natting and block Gaia Portal access

Blason_R — Mon, 28 Aug 2023 07:39:05 GMT

Hello,

I have harmony connect on-premise version which I need to give to the people who are roaming and they need to connect to on-premise server over Internet.

I know that my server needs to be natted so that agents will communicate over internet however when I do that since EPM server listen on port 443 even my Gaia portal even exposes over internet.

Since being a mgmt server I do not have option to set the different URI for GAIA access and wondering how do I do that?

TIA

Blason R

Re: Harmony Connect On-premise natting and block Gaia Portal access

PhoneBoy — Mon, 28 Aug 2023 14:11:34 GMT

It can be configured via clish: set web ssl-port 4434 (or whatever the desired port is).

Re: Harmony Connect On-premise natting and block Gaia Portal access

Blason_R — Tue, 29 Aug 2023 02:41:28 GMT

Nope - that is not possible and I already tried that.

Agent goes offline since they connect on port 443.

Re: Harmony Connect On-premise natting and block Gaia Portal access

the_rock — Tue, 29 Aug 2023 02:44:22 GMT

Thats odd. I set mgmt web UI on port 4434 many times before and worked just fine.

Andy

Re: Harmony Connect On-premise natting and block Gaia Portal access

Blason_R — Tue, 29 Aug 2023 02:45:50 GMT

Yes It works with only SMS server but definitely not with EPM server. have you tried with EPM or pure mgmt server?

Re: Harmony Connect On-premise natting and block Gaia Portal access

the_rock — Tue, 29 Aug 2023 02:47:11 GMT

As a matter of fact, yes, on R81.10, no issues.

Andy

Re: Harmony Connect On-premise natting and block Gaia Portal access

Blason_R — Tue, 29 Aug 2023 02:50:21 GMT

Hmmm - Not sure why it didnt work with me then. I am on R81 and is having EPM server only.

I verified the apache2 config files and internally everything is diverted to localhost:4434 and multiple vhosts.

Let me give a try again though

Re: Harmony Connect On-premise natting and block Gaia Portal access

the_rock — Tue, 29 Aug 2023 02:53:15 GMT

Not sure mate, sorry. I had to delete that lab to make some space for Palo Alto lab, but definitely worked fine in R81.10. Cant recall jumbo on it back then, but Im sure that makes no difference.

Andy

Re: Harmony Connect On-premise natting and block Gaia Portal access

G_W_Albrecht — Tue, 29 Aug 2023 08:13:15 GMT

Did you read this already: https://support.checkpoint.com/results/sk/sk178064