Configure a Firewall for an Original WebX or XML Client - System Connection

If your system uses a firewall between the Original WebX or XML client and the Geo SCADA Expert server, you need to configure it so that it allows communications via the port used by the web server. The Geo SCADA Expert web server is built into each Geo SCADA Expert server instance. Typically, a local IIS reverse proxy performs TLS negotiation on behalf of the Geo SCADA Expert server. The local proxy itself is configured in IIS, with settings in the Server Configuration Tool being used to inform the Geo SCADA Expert server of the IIS configuration. By default, the local proxy listens for HTTPS connections on HTTPS port 443. If the default settings are in place, this means that the firewall has to allow port 443. If the default port is not used, you will need to configure the firewall to allow the ports that are used by your system.

You can see which ports are being used by the web server on your system by examining the following:

• General>Information data shown on the Server Status Tool (see Information in the Geo SCADA Expert Guide to the Server Status Tool).
• System Configuration>WebX settings on the Server Configuration Tool (see Configuring Security and Connection Settings for Original WebX Clients in the Geo SCADA Expert Guide to Security).

  The WebX settings include properties for mirroring a firewall's port mapping. These properties are used if your system uses a proxy firewall between the Original WebX server and Original WebX clients. The properties provide Geo SCADA Expert with the port mapping information that it requires to communicate with Original WebX via a proxy firewall or other proxy server (see Define the Local Proxy Settings for the Original WebX Server, and see Define the Network Proxy Settings for the Original WebX Server in the Geo SCADA Expert Guide to Security).
  

For more information about firewalls, please refer to the manufacturer’s documentation supplied with your firewall.