Harmony Connect On-premise natting and block Gaia Portal access

[Blason_R]

Hello,

I have harmony connect on-premise version which I need to give to the people who are roaming and they need to connect to on-premise server over Internet. 

I know that my server needs to be natted so that agents will communicate over internet however when I do that since EPM server listen on port 443 even my Gaia portal even exposes over internet.

Since being a mgmt server I do not have option to set the different URI for GAIA access and wondering how do I do that?

TIA

Blason R

[PhoneBoy]

It can be configured via clish: set web ssl-port 4434 (or whatever the desired port is).

[Blason_R]

Nope - that is not possible and I already tried that. 

Agent goes offline since they connect on port 443.

[the_rock]

Thats odd. I set mgmt web UI on port 4434 many times before and worked just fine.

Andy

[Blason_R]

Yes It works with only SMS server but definitely not with EPM server. have you tried with EPM or pure mgmt server?

[the_rock]

As a matter of fact, yes, on R81.10, no issues.

Andy

[Blason_R]

Hmmm - Not sure why it didnt work with me then. I am on R81 and is having EPM server only.

I verified the apache2 config files and internally everything is diverted to localhost:4434 and multiple vhosts. 

Let me give a try again though

[the_rock]

Not sure mate, sorry. I had to delete that lab to make some space for Palo Alto lab, but definitely worked fine in R81.10. Cant recall jumbo on it back then, but Im sure that makes no difference.

Andy

[G_W_Albrecht]

Did you read this already: https://support.checkpoint.com/results/sk/sk178064