Hi All,
I am looking to make our JSS instance available to external devices. I have read https://jamfnation.jamfsoftware.com/article.html?id=174. I am wondering if this is the only option or is it possible to make the JSS available to external devices via a reverse proxy such as an F5 gateway? I am ok if a JSS instance in the DMZ is the way to go, but just thinking if there is another way to do it without an additional server.
My initial thinking is that if the external devices only need to talk to the JSS server on port 8443 & port 80/443 to the distribution point (we have JSS & DP on the same server), would it be possible to create a virtual server on the F5 that the external devices connect to and then simply forwards requests on these ports to the internal JSS server rather than having to build and install JSS on a dedicated server in our DMZ?
Has anyone tried this before? My only concern would be the security side of it and essentially allowing devices to connect all the way through to an internal server on port 80/443/8443.
I have also raised a support call with JAMF Support just to get their feedback on it, but thought I would also ask the question here.
Thoughts?
Cheers
Dave
