Mohamed,
On 22 Feb 2008, at 04:19, Mohamed Ali wrote:
Dear forum users,
I have installed SGD 4.4 in my SFT2000 server. The hostname is
portal-01. Here are the features i have configured:
1) Securing Connections Between Client Devices and SGD Servers
2) Securing the Connection Between a Web Browser and a Web Server
on the SGD Host
3) Firewall Traversal (Firewall Forwarding)
4) Configure SGD to use TCP port 443 for encrypted connections.
5) Configure each SGD Web Server in the array to bind to localhost:
443.
6) Configure each SGD server in the array to forward HTTP traffic
to localhost:443.
7) I edited External DNS Names ( *:portal-01.esuria.com.bn &
*:portal.esuria.com.bn )
Note: Our FW admin has NAT the public IP 202.160.14.43 to
172.16.3.82( portal-01 ) and allowed port 80 & 443 only.
Outcome:
1) I can successfully login to SGD via http and https from my
internal network( 172.16.2.x )
2) I tried http to SGD, enter username and password but it failed
with error message " Cannot connect to the server
portal-01.esuria.com.bn:443 ".
3) Also from outside Network, i tried using https and this time i
don't even see the username and password page but its came out with
message " The connection has timed out ".
4) From outside Network laptop, in the command prompt, i typed
"telnet portal-01.esuria.com.bn 80" or "telnet portal.esuria.com.bn
80" and the connection responded.
5) Outside network, i typed telnet portal-01.esuria.com.bn 443 or
telnet portal.esuria.com.bn 443, the results shows " Could not open
connection to the host, on port 443: Connect failed ".
To add more datapoints, I can successfully reach:
http:portal-01.esuria.com.bn/sgd/
https://portal-01.esuria.com.bn/sgd/
and
http://portal.esuria.com.bn/sgd/
https://portal.esuria.com.bn/sgd/
Obviously this is from the outside Network (Internet).
I can't look any further into this without credentials but thought
you should know that the Web server looks correct.
So I can't explain Outcome 3), 4) or 5).
Check your client-side proxy configuration and that you're resolving
names as expected on the outside network.
-FB
_______________________________________________
SGD-Users mailing list
[email protected]
http://www.filibeto.org/mailman/listinfo/sgd-users