You are viewing limited content. For full access, please sign in.

Question

Question

Weblink Designer DMZ security

asked on July 9, 2018

I am currently experiencing issues attempting to access the Weblink Designer from a DMZ. If logging into the machine and accessing the designer there are no issues. When I try access it from the outside I get a pop up for credentials, I enter the local admin user credentials and then still receive an access denied message. I have changed the application pool identity as well as modifying access on the installation folders. Am I missing something?

0 0

Answer

SELECTED ANSWER
replied on July 9, 2018

Hi Cristobal,

I have tested out by applying the following settings to WL10.1 and I was able to log in to Designer from outside.

 

1- Installed WL10.1 on DMZ

2- IIS settings on DMZ :
a. Edit “Designer” Anonymous Authentication: 

b. Edit “Designer” Basic settings>connect as method: 

3- User settings on DMZ

a. Add in user in Computer Management >Local User and Groups>Users

b. Add in user in Computer Management >Local User and Groups>Groups>Laserfiche WebLink Administrators

4. WebLInk install folder settings on DMZ:

a. For the Weblink install folder, add and assign the log in user permissions to access:

b. For the same WebLInk install folder, provide the following user “IIS AppPool\WebLinkDesignerAppPool” security rights

5- Use this user (in example: julia.xie) to login to dmz designer outside 

http://dmzMachineName/designer

username: dmzMachineName\julia.xie    (must include the dmz machine name)

password: yourpassword

This will no longer give 403 access denied error page.

 

Let me know if this method works or if you have any other questions.

Thanks,

Julia

3 0
replied on April 11, 2019 Show version history

Hi Julia,

 

When trying to update or replace the Main Logo or any images within the Weblink Designer, I get a prompt for credential but does not take any of the known working credentials. In the end, the image shows a broken image until the page is set to "Restore to Default Images".  Do you have any suggestions?

0 0
replied on December 6, 2022

Would this also apply if WebLink is not in a DMZ, but is using a DNS alias?

0 0
replied on December 6, 2022

If you are accessing via a dns alias, you might need to explicitly specify the host name in the credentials you enter. So you would enter "machinename\username" in the credentials prompt.

0 0
replied on December 7, 2022

The user isn't local to the machine though, it is a domain user.

0 0

Replies

You are not allowed to reply in this post.
You are not allowed to follow up in this post.

Sign in to reply to this post.