You are viewing limited content. For full access, please sign in.

Question

Question

Weblink-Disable Port 80 Traffic

asked on November 10, 2021

Hello,

Customer reached out with the following requests:

We need to remove all port 80 traffic per the security team.

Is this feasible?  Per the below LF Admin Link for Weblink Firewall Settings it stipulates if there is a Firewall between your WL and LF Server Port 80 and 5051 need to be open:

https://www.laserfiche.com/support/webhelp/Laserfiche/10/en-us/administration/#../Subsystems/WLAdmin/Content/Firewall_Setup.htm%3FTocPath%3DWebLink%2520Administration%7CInstallation%7CPost%2520Installation%2520Information%7C_____4

Appreciate any other possible alternative advice if there is any.

Jeff Curtis

0 0

Answer

SELECTED ANSWER
replied on November 10, 2021 Show version history

Yes.

  1. Configure the LF Server instance to work over HTTPS on port 443. Easiest way to do this is by installing IIS on the server hosting LFS and binding a valid cert with the server FQDN (please no self-signed certs) to port 443 there. LFS can now accept HTTPS traffic on 443 in addition to HTTP traffic on 80.
  2. In WebLink Designer config, check "Use SSL/TLS" when adding the repository. You must use the LFS server's FQDN for the server address so it matches the certificate.

Anywhere you see in the documentation that talks about requiring "port 80 to Laserfiche Server" has 443/HTTPS as an alternative option. I'm not personally aware of any exception to this rule.

0 0
replied on November 11, 2021

Thanks Samuel

I will pass this along to the customer

Jeff Curtis

1 0

Replies

You are not allowed to reply in this post.
You are not allowed to follow up in this post.

Sign in to reply to this post.