NetXMS Support Forum

English Support => General Support => Topic started by: richard21 on December 22, 2025, 07:37:58 PM

Title: Connect HTTP using web interface behind firewall
Post by: richard21 on December 22, 2025, 07:37:58 PM
Hi,

Is it possible to change the way the random port no's are generated when connecting to a device using HTTP or HTTPS when using the Web client as this doesn't work when the webserver is behind a firewall with only port 443 open

Regards
Richard
Title: Re: Connect HTTP using web interface behind firewall
Post by: Filipp Sudanov on December 23, 2025, 12:58:55 AM
Hi,

Can you clarify a bit - are you using an object tool, or something else? Is it so that firewall on your webserver machine wants outgoing connections to be from port 443?
Title: Re: Connect HTTP using web interface behind firewall
Post by: richard21 on December 29, 2025, 01:10:13 PM
Hi Filipp,

The issue is the Netxms Server is behind a firewall and when accessing it externally using the web interface and try and use the below object tool to connect to the Web interface on a monitored node it launches the web browser but tries to connect to https://NetxmsWebRL:35569/ the port no is random (this works when using the full client it only affects the web Interface) the object tool is configured as below
URL: https://${local-address}:${local-port}
with setup TCP tunnel to remote port enabled

Cheers
Richard
Title: Re: Connect HTTP using web interface behind firewall
Post by: Filipp Sudanov on December 30, 2025, 03:09:45 PM
Currently not supported, but theoretically it could be implemented to choose port number from a specific range. However, this is not good approach from security standpoint as if you are opening these ports to the Internet anyone else could have access to what's exposed on these ports.

More advanced way would be to use WebSockets so that browser would open a port on localhost, but this might be complex to implement and I am note sure if this fits with current framework on which the client is based.

Have you considered using some sort of VPN to access your server instead of a forwarded port?
Title: Re: Connect HTTP using web interface behind firewall
Post by: richard21 on December 31, 2025, 12:21:27 PM
Hi Fillipp,

thanks for the reply I'll look at another method of access probably based around a VPN

Regards
Richard