Configuring Process Platform in DMZ |
| This topic describes the procedure to configure Process Platform in DMZ. |
|
Process Platform services open some anonymous sockets internally for transmission of SOAP messages. These sockets are opened on any freely available port. But in case of a DMZ machine, only specified ports are made available by the administrator. So, when Process Platform is installed in DMZ, there may be problems in transmission of SOAP messages, as the freely available ports may be restricted by the administrator.
 |
Note that deploying Process Platform in the DMZ is not a recommended setup, as a lot of ports need to be opened in the firewall. It is advised to use a Reverse proxy in which case only a couple of ports are required to be opened. Depending on the requirements and usage of SSL offloading, for example, only the port(s) used by the Process Platform webserver need to be opened. |