SWC - How can I go through a firewall?

[Giuseppe Perricone]

Hi all, i've installalled a Secure web Console on my Sistems and I want to know how can I go through a firewall.
Someone can help me?

[Bill McNAMARA_1]

Firewall Security

Firewall security prevents unauthorized users or applets from accessing the Intranet. Using a firewall ensures that whatever isn't explicitly allowed into an Intranet is refused entry. A firewall also provides an audit trail of system access, including source, destination, protocol used, and other details. Datacenters will already have a firewall in place.

In addition, Central Web Console works specifically with ports 1916 and 1917. The Central Web Console Applet (terminal emulation window) will not start unless those ports are configured to pass through the firewall.

A system administrator can configure the Central Web Console to use a port number that's already allowed through the firewall, such as port 23 for Telnet.

The Central Web Console's dependence on port configuration to a firewall helps to ensure secure connections and safe transmissions of information.


from:
http://docs.hp.com//hpux/onlinedocs/J6352-90001/00/00/11-con.html

Later,
Bill

[Giuseppe Perricone]

Hi, Bill

Thanks for your answer. The problem is that I'm not using CENTRAL web console but Secure Web Console.

The HP Secure Web Console is a small (about the size of a VCR tape) Internet appliance that makes the HP 9000 and HP 3000 server consoles available over a corporate Intranet or Internet for the purpose of remote management access to the server console.

I need to use them outside a Firewall (PIX CISCO) i've already allowed through the firewall port 23 for Telnet and 80 for HTTP, but this hasn't been sufficient...

By, Giuseppe

[Bill Hassell]

The Secure Web Console is not recommended for firewall access as the character encryption is a simple substitution cipher. Instead, the best solution is to get the HP SSL Accelerator to put in front of the Web Console's LAN.

The web console uses port 80 to get started but then (incorrectly) uses port 23 for non-telnet protocol. What happens is that most firewall boxes (correctly) shutdown port 23 when it detects non-telnet activity on the port. On some firewalls, you can defeat this security feature by allowing any IP address to use port 23, but then you might as well disconnect the firewall since it isn't doing much good.

There is a beta version of the Web Console firmware available that will allow you to configure some other port (say, 9207 or whatever) to be the Java code port besides port 80 for the web portion. Ask your HP representative for a copy. Since the new Web Console firmware still does not use SSL, it would still be a better solution to:

a. use the HP SSL Accelerator box

b. Use the new version 2 Central Web console which is a software package that runs on HP-UX. The HP-UX machine would have several (up to 64) ports connected to various systems, and using Apache web server, provide web console connections. SSL can be added to the Apache web server for use over a firewall.

[Duncan Edmonstone]

Alternatively check out the following:

http://www.arula.com/ProductSecSSL.shtml

Looks familiar doesn't it!