Re: Exposing Remedy (Mid-Tier) on the Internet

From: Action Request System discussion list(ARSList) [mailto:arsl...@arslist.org] On Behalf Of Tanner, Doug Sent: Friday, June 26, 2009 8:45 AM To: arslist@ARSLIST.ORG Subject: Exposing Remedy (Mid-Tier) on the Internet ** ** I am getting ready to meet with the Security

Exposing Remedy (Mid-Tier) on the Internet

I am getting ready to meet with the Security and Network teams, as we want to configure Remedy Mid-Tier to be on the internet. I am interested in some past experiences, proper configuration, gotcha's that will satisfy Security, Network and Remedy administration.

Re: Exposing Remedy (Mid-Tier) on the Internet

: Exposing Remedy (Mid-Tier) on the Internet I am getting ready to meet with the Security and Network teams, as we want to configure Remedy Mid-Tier to be on the internet. I am interested in some past experiences, proper configuration, gotcha's that will satisfy Security, Network and Remedy

Re: Exposing Remedy (Mid-Tier) on the Internet

@ARSLIST.ORG Subject: Re: Exposing Remedy (Mid-Tier) on the Internet ** You may already be aware of this, there are two white papers on ARS security. Have you gone through these two docs? -Guillaume -Original Message- From: Action Request System discussion list(ARSList) on behalf of Tanner

Re: Exposing Remedy (Mid-Tier) on the Internet

These step will help you with the security guys... (better to be prepared) - mid-tier in DMZ - set up ar system to run on a dedicated port - run ar system as non root - no access for unrestricted users - run apache web server - run tomcat application server -- Jarl 2009/6/26 Tanner, Doug

Re: Exposing Remedy (Mid-Tier) on the Internet

Thanks Jarl, hope life is treating you well, long time no see :) -Original Message- From: Action Request System discussion list(ARSList) [mailto:arsl...@arslist.org] On Behalf Of Jarl Grøneng Sent: Friday, June 26, 2009 2:38 PM To: arslist@ARSLIST.ORG Subject: Re: Exposing Remedy (Mid

Re: Exposing Remedy (Mid-Tier) on the Internet

One thing to consider -- if you put one form on the internet -- you actually put every form on the internet. That may not be the intention. If not -- check out Kinetic Request -- you can be specific about what you are publishing. (and many more benefits..) As an interesting

Re: Exposing Remedy (Mid-Tier) on the Internet

Deploying a form is one of the things I do and don't miss from the RemedyWeb days. Creating/maintaining special views just to deploy a form to the web was a bit of a pain but it did allow you to select what forms would be available from a web interface. Now days this goes back to the suggestion