nav[aria-label="Primary Navigation"] { padding: 0; & ul { list-style: none; width: 100%; display: flex; flex-direction: row; justify-content: start; align-items: start; gap: 30px; padding: 0; & li { margin: 0; } & ul li { list-style: none; } } }

Disable to access ArcGIS Server Manager externally

Chang-HengYang

The background of my server

I installed the ArcGIS server 10.3.1 (No Web Adaptor installed)

I have Windows 2012 Server x64 with SQL Server 2012 R2.

I'm also using IIS 8 as a web server on the same machine.

I am wondering if I could disable the external access to the link for the ArcGIS Server Manager.

For example, assuming the link is "http://gisserver.domain.com:6080/arcgis/manager/". Could I know if there is a way to disable/block the external users to access to the link?

Many thanks,

Changheng

Najděte více příspěvků označených jako

Accepted answers

RandallWilliams

Installing the web adaptor will allow you to disable admin access. Or conversely you could configure ARR on IIS to make it work as a reverse proxy and set your directives to not point to the manager context, but if you're going that route anyway it's considerably easier to just install the web adaptor.

All comments

RandallWilliams

Chang-HengYang

Hi Randall,

I followed your instructions. The port 6080 was hidden. The rest service directory is created ("stateparkmap.okstate.edu/ousgeog/rest/") with the active windows authentication. However, the public still can access the default rest directory (stateparkmap.okstate.edu:6080/arcgis/rest) without any username and password inputs. In addition, I have created the inbound rule to allow the port 6080/6443 in the server firewall. Could you tell me how I only allow the directory work ("stateparkmap.okstate.edu/ousgeog/rest/")?

Thanks,

Hank

RandallWilliams

Typically, the architecture looks like this:

database---GIS Server || firewall || ---web server (IIS) ---public WWW

The web adaptor connects to the GIS Server via port 6080 (http) or 6443 (https). In order for the communication success, ports 6080/6443 are opened on the firewall.

In your case, it appears that the GIS Server is installed on the web server with your IIS instance. Is that correct? If so, you can use the Windows firewall to firewall off ports 6080 and 6443 from external traffic (or only allow traffic from the web adaptor to come through those ports)

Since you're using Windows Auth, you should strongly consider configuring your web adaptor to communicate with your GIS Server on port 6443, obtain a certificate from a Certificate Authority, and enable HTTPS/SSL at the web tier.

Otherwise the credentials supplied to access your GIS Server site can easily be sniffed on the wire.

RandallWilliams

Here's some doc:

http://server.arcgis.com/en/server/latest/administer/windows/inside-an-arcgis-server-site.htm

Připojte se ke konverzaci

Přihlášení členové mohou přispívat, sledovat aktualizace a další. Jste tu noví? Zaregistrujte si bezplatný účet.

Rychlé odkazy

Community Help
Find useful guides, FAQs, and documents to help you navigate and make the most of Esri Community.