PDA

View Full Version : minimal port configuration



atsushi-kawai
16.10.2017, 08:31
Hello, I'm trying to access ProfiLux 3.1T eX from myGHL.
The device is located inside a LAN, which is shielded by multiple firewalls.

I already confirmed that myGHL can have access to the device when all the firewalls are disabled.
For production run, however, all unnecessary ports should be closed for security reason.
So I need to know which ports are mandatory for the communication between myGHL and the device.
myGHL uses only port 80 or does it need some other ports?

Thank you,

Atsushi

Gunther
18.10.2017, 19:05
For the GHL Cotrol Center port 10001 has to be open.

atsushi-kawai
19.10.2017, 01:33
Thanks for the information.
What about myGHL? It requires port 10001 as well?

Gunther
22.10.2017, 20:39
What about myGHL? It requires port 10001 as well?

No. It´s using Port 80/81 like almost any other web page.

atsushi-kawai
23.10.2017, 03:11
Thanks.
Just to confirm: Port 81 is not very common I guess. Port 80 and 443 you mean?

PIWAWT
24.10.2017, 02:08
Hallo Atsushi
Is it not the port that you set in the GCC under System_Webserver_Serverport?

Regards Pit

atsushi-kawai
24.10.2017, 02:51
Hello Pit,

I set that field to 80 but not 81. In such a case I don't need 81 open, do I?

When accessed from a web browser, myGHL page redirects http to https.
So I thought myGHL might require port 443 to communicate with ProfiLux, too.

Thanks.

MatthiasF
24.10.2017, 06:23
Hello,

generally you should not need to allow ports for using myGHL with ProfiLux.
It works over websockets on tcp port 80.
Since the communication is made from inside (from ProfiLux) to myGHL, it should
not be blocked by your firewall. It worksk like web browsing.

Port 443 is used for accessing the html content on your browser (HTTPS protocol).

atsushi-kawai
24.10.2017, 06:40
I understand very clearly.
To summarize, ProfiLux need outbound port 80, Web browser need outbound 443, nothing else.
Thank you very much for you help.