External Access for Self-Service

[anickless]

We have been hosting the JSS and Self-service within the LAN network and now want to offer it after hours for home users so they can download self-service items as well as if a laptop gets lost I can remote wipe it.

Anyone have any experience with this? ports to open up?

[dan-snelson]

Have you had a chance to review Installing a JSS Web Application in the DMZ ?

[ooshnoo]

Setup a JSS web app in a DMZ and use it in conjunction with a public facing distribution point. We use a cloud DP at Amazon for this purpose.

[chris_miller]

We've had ours open to the web for years. Be careful to follow the steps in the article posted by dan.snelson exactly, especially the keystore. I messed up our cluster by being a little to hasty with those steps.

Our current setup is to host the DB on a separate server from the JSS Tomcat installs. Those sit in the DMZ behind a load balancer. Works great. I pushed out iOS 10 updates over the weekend when everyone was at home using their own bandwidth.