TCP Port numbers Secure Web Console

[Marcel Boogert_1]

Hi there,

Can anyone tell me what port numbers the HP Secure Web Console uses? Only port 443 for HTTPS doesn't seem to do the trick.

Thanks in advance...

Greetings,

Marcel.

[Leif Halvarsson_2]

Hi,
Do you mean the GSP service processor ? The default port is 2023 (check with the "lc" command.

[Marcel Boogert_1]

I knew that already. The problem is my firewall. That's why I need to open some ports to gain access through the web.

Are there any other ports to configure?

MB.

[Antoniov.]

You can alternatively:
a) modify security of your firewall
b) change port with lc command.
I'm not sure after you changed port, your browser still connect. Try in local network before.

Antonio Vigliotti

[Florian Heigl (new acc)]

The secure webconsole only uses 443 for the authentication, and the authentication is the only thing that the 'secure' stands for.
(please re-read the hp secure webconsole faq, if You don't believe me.)

DO NOT open Your firewall to that and DO NOT route secure webconsole traffic through the internet.

It is only scrambled in a fashion that is well documented both at security and worse sites and broken within seconds.

Effetively it needs to be able to initiate a telnet session for the pc with the java applet to the secure webconsole.

Anyhow, as far as I remember, You'd need to open 443 and 23, but please only do it if there is additional protection like a completely firewalled and encrypted vpn.

http://www.security-express.com/archives/bugtraq/1999-q4/0157.html
(stolen from one of bill hassels older posts that google turned up :)

[Marcel Boogert_1]

Florian,

Thanks for your concern. Of course there's a stealth firewall and VPN - RSA security between the connection.

MB.

[Torsten.]

Hi Marcel,

fyi, the latest firmware for the secure web console (the gray box - it's not a GSP) was A2.0. You can configure different ports, but it's still telnet.

[Marcel Boogert_1]

Hi there,

The problem cannot be solved. Our firewall doesn't allow the popup the GSP generates through the web.

Regards, MB.