topic Re: HP ILO4 directly to internet? in ProLiant Servers (ML,DL,SL)

HP ILO4 directly to internet?

GT-R — Mon, 18 Sep 2017 15:21:00 GMT

Is HP ILO4 safe to connect it directly to the internet without a vpn?

Re: HP ILO4 directly to internet?

Jimmy Vance — Mon, 18 Sep 2017 15:42:55 GMT

Connecting iLO directly to the internet is not considered a best practice. You should access iLO over a VPN connction

Re: HP ILO4 directly to internet?

GT-R — Mon, 18 Sep 2017 17:23:51 GMT

So its not safe, right?

Because i saw some companys, they connected the ilo directly to the web.

thanks for the answer

Re: HP ILO4 directly to internet?

parnassus — Tue, 19 Sep 2017 07:01:11 GMT

@GT-R wrote:
Is HP ILO4 safe to connect it directly to the internet without a vpn?

What do you mean exactly with "directly to the internet without a vpn"?

Are you considering protecting the HPE iLO4 Web Interface by using a Firewall? so, a possible approach (not the very best practice, stil better the VPN approach) would be to access the HPE iLO4 Web Interface by configuring a basic Port Forwarding at company Firewall level (so HPE iLO4 is placed behind a NAT) and adding a specific Firewall rule to estabilish who exactly - AKA specific IP Public Address - can actually successfully connecting to HPE iLO4 Web Interface excluding all the others that are trying to connect? ...in any case a proper configured Firewall is needed.

Re: HP ILO4 directly to internet?

Torsten. — Tue, 19 Sep 2017 07:24:16 GMT

This is exactly the question - did the ILO get really a public IP address or is it behind a firewall, router, etc ... ?

Re: HP ILO4 directly to internet?

GT-R — Tue, 19 Sep 2017 19:47:33 GMT

yes with a public ip address no firewalls no routers, nothing..

thats why im wondering.

every one can access the ilo4 from the web.

Re: HP ILO4 directly to internet?

parnassus — Tue, 19 Sep 2017 20:02:46 GMT

Gosh, that's a very bad practice IMHO...for sure a configuration I personally avoid as hell.