Skip to main content
Question

JDS in DMZ?

  • September 6, 2013
  • 4 replies
  • 14 views

Forum|alt.badge.img+23

We currently have an Apache server sitting in our DMZ acting as a distribution point. It's pretty locked down, but not as much as it could be. JAMF's JDS allows (and insists on) certificate based communications. Sounds ideal!

Is anyone running a JDS as an externally available distribution point?

4 replies

Forum|alt.badge.img+13
  • Contributor
  • October 1, 2013

I'd like to know more about this too. I doubt the network guys will let me put a JDS in our DMZ, so I'm trying to figure out which ports I'd need to open on the firewall in order to have a JDS be externally available.


ImAMacGuy
Forum|alt.badge.img+23
  • Esteemed Contributor
  • November 19, 2013

+1


Forum|alt.badge.img+10
  • Valued Contributor
  • November 19, 2013

@stevehahn][/url I think you just need 443 open for webdav connections. Also, I think the JDS still needs to be pingable for casper admin to mount it.


Forum|alt.badge.img+16
  • Valued Contributor
  • February 11, 2015

So if I'm understanding this correctly (and my read-through of the relevant portions of the admin guide), I should only need to open port 443 to put a non-root JDS in the DMZ? Will ping need to be open from internal subnets to the DMZ instance?