Connect HTTP using web interface behind firewall

Started by richard21, December 22, 2025, 07:37:58 PM

Previous topic - Next topic

richard21

Hi,

Is it possible to change the way the random port no's are generated when connecting to a device using HTTP or HTTPS when using the Web client as this doesn't work when the webserver is behind a firewall with only port 443 open

Regards
Richard

Filipp Sudanov

Hi,

Can you clarify a bit - are you using an object tool, or something else? Is it so that firewall on your webserver machine wants outgoing connections to be from port 443?

richard21

Hi Filipp,

The issue is the Netxms Server is behind a firewall and when accessing it externally using the web interface and try and use the below object tool to connect to the Web interface on a monitored node it launches the web browser but tries to connect to https://NetxmsWebRL:35569/ the port no is random (this works when using the full client it only affects the web Interface) the object tool is configured as below
URL: https://${local-address}:${local-port}
with setup TCP tunnel to remote port enabled

Cheers
Richard

Filipp Sudanov

Currently not supported, but theoretically it could be implemented to choose port number from a specific range. However, this is not good approach from security standpoint as if you are opening these ports to the Internet anyone else could have access to what's exposed on these ports.

More advanced way would be to use WebSockets so that browser would open a port on localhost, but this might be complex to implement and I am note sure if this fits with current framework on which the client is based.

Have you considered using some sort of VPN to access your server instead of a forwarded port?

richard21

Hi Fillipp,

thanks for the reply I'll look at another method of access probably based around a VPN

Regards
Richard