Skip to main content
Question

External Access for Self-Service

  • September 27, 2016
  • 3 replies
  • 14 views

anickless
Forum|alt.badge.img+9

We have been hosting the JSS and Self-service within the LAN network and now want to offer it after hours for home users so they can download self-service items as well as if a laptop gets lost I can remote wipe it.

Anyone have any experience with this? ports to open up?

3 replies

dan-snelson
Forum|alt.badge.img+30
  • Honored Contributor
  • September 27, 2016

Have you had a chance to review Installing a JSS Web Application in the DMZ ?


Forum|alt.badge.img+14
  • Honored Contributor
  • September 28, 2016

Setup a JSS web app in a DMZ and use it in conjunction with a public facing distribution point. We use a cloud DP at Amazon for this purpose.


Forum|alt.badge.img+10
  • Contributor
  • September 28, 2016

We've had ours open to the web for years. Be careful to follow the steps in the article posted by dan.snelson exactly, especially the keystore. I messed up our cluster by being a little to hasty with those steps.

Our current setup is to host the DB on a separate server from the JSS Tomcat installs. Those sit in the DMZ behind a load balancer. Works great. I pushed out iOS 10 updates over the weekend when everyone was at home using their own bandwidth.