HP ILO4 directly to internet?

[GT-R]

Is HP ILO4 safe to connect it directly to the internet without a vpn?

[Jimmy Vance]

Connecting iLO directly to the internet is not considered a best practice.  You should access iLO over a VPN connction

[GT-R]

So its not safe, right?

Because i saw some companys, they connected the ilo directly to the web.

thanks for the answer

[parnassus]

---

@GT-R wrote:

Is HP ILO4 safe to connect it directly to the internet without a vpn?

---

What do you mean exactly with "directly to the internet without a vpn"?

Are you considering protecting the HPE iLO4 Web Interface by using a Firewall? so, a possible approach (not the very best practice, stil better the VPN approach) would be to access the HPE iLO4 Web Interface by configuring a basic Port Forwarding at company Firewall level (so HPE iLO4 is placed behind a NAT) and adding a specific Firewall rule to estabilish who exactly - AKA specific IP Public Address - can actually successfully connecting to HPE iLO4 Web Interface excluding all the others that are trying to connect? ...in any case a proper configured Firewall is needed.

[Torsten.]

This is exactly the question - did the ILO get really a public IP address or is it behind a firewall, router, etc ... ?

[GT-R]

yes with a public ip address no firewalls no routers, nothing..

thats why im wondering.

every one can access the ilo4 from the web.

[parnassus]

Gosh, that's a very bad practice IMHO...for sure a configuration I personally avoid as hell.