Proxy server question from HP Labs

[Brad Klein]

HP offers a utility pricing program where a lease payments for a server are based on the CPU utilization of the server. To calculate the monthly lease amount, the CPU utilization from the server is transmitted to HP.

As part of this program, to facilitate the transmission of data to HP, HP provides a separate metering system (called a utility meter) that resides on the customer's network behind the customer's firewall. Servers under a utility pricing contract transmit utilization information to the utility meter where it is collected and then transmitted to HP. The systems being metered use HTTPS to communicate to the utility meter.

In your environment, would you place a proxy server between the system being metered and the utility meter? Why or why not? To be clear, we are not asking if the proxy would be placed between the utility meter and HP, but rather BEHIND your firewall between the utility meter and the metered system(s).

[Dave La Mar · Accepted solution]

We would not have a problem with this. Our LAN group is very efficient on their use of the firewall and what ports are allowed input output. We currently have both scenarios in place on where a proxy server is located in realtion to the firewall.

Best regards,

dl

[Mark Greene_1]

We would probably not use a proxy server, but setup a private network between the HP system in question and the utility meter with a hub inbetween that we could then plug into our regular LAN for access out to the firewall, assuming your utility meter allows for such a configuration.

mark

[Steven E. Protter]

Our organization has a stateless firewall. The only reason we would not do this is we are very tight on what ports are open and closed on our two firewall system.

So I guess the answer is it depends on the design and how it fits into our security.

In todays world, being the kind of organization we are, we can't be too careful. Our firewall allows https outbound but not inbound through the firewall.

SEP

[Brad Klein]

Just a point of clarification, the port that will be used for the HTTPS communication between the metered system and the utility meter is port 5989, if that matters. This isn't the standard HTTPS port that your firewall may be configured to allow.

[melvyn burnard]

HP Labs are still after any input the user forum can give them, so bumped to top.