Apple SU Server behind firewall: What ports are needed?

[powellbc]

From what I can see the only needed port is 8088; does this encompass the client getting everything it needs from the SUS, or do the more standard ports 80/443 need to be opened up as well? I am trying to get my ducks in a row before making the request to our network engineers to have the ports opened up.

[jarednichols · Accepted solution]

8088 is it.

All Apple SUS is is a kludged version of Apache running on 8088. That's why Reposado is able to exist. Greg simply reverse-engineered Apple SUS.

[powellbc]

Excellent, thanks for the info Jared.

[lpnicholas]

@powellbc Were you able to get 8088 open, or was it a huge deal? Or, did you go the Reposado route? Let me know... in the same boat. All of our faculty now have MacBook Pros and are constantly off-campus. I want them to be able to still point to our internal SUS—preferably without having to connect via VPN. Is there a huge security issue opening 8088??

[lpnicholas]

@powellbc Were you able to get 8088 open, or was it a huge deal? Or, did you go the Reposado route? Let me know... in the same boat. All of our faculty now have MacBook Pros and are constantly off-campus. I want them to be able to still point to our internal SUS—preferably without having to connect via VPN. Is there a huge security issue opening 8088??

[powellbc]

@lpnicholas

We opened up 8088 to outside and it is working well. The biggest issue in our environment was getting the external internet facing IP created. Once that was done and 8088 was opened on our perimeter firewall it worked as expected.