nav[aria-label="Primary Navigation"] { padding: 0; & ul { list-style: none; width: 100%; display: flex; flex-direction: row; justify-content: start; align-items: start; gap: 30px; padding: 0; & li { margin: 0; } & ul li { list-style: none; } } }

restrict webadaptor services directory access

Duarte_Carreira

Is there a way to have the services directory accessible through port 6080, and not through the webadaptor?

As far as I can see we can only disable all access. This doesn't make much sense to me... it would be useful to have access "internally" and block "external" access.

Thanks,

Duarte

Encuentra más publicaciones etiquetadas con

Accepted answers

RebeccaStrauch__GISP

Duarte,

so, it seems the "answer" to your question is "no", currently there isn't a way to do this. I did some searching on the ideas page and found what I think we want. Please go and promote it.

ArcGIS Idea - Disable REST Services Directory through Web Adaptor

You will need to log in to promote it (should be same login as geonet). Maybe others will see this thread and do the same.....Or if it just takes some tweaks somewhere, maybe someone at esri can give us info.

There are other interesting ideas in regards to the rest service directory.....a search

http://ideas.arcgis.com/apex/ideaSearchResults?s=rest+service+directory&searchButton=search

Some good ideas that I can get behind.

BTW, I have not installed 10.3.1 yet....so don't know if this has been added or not.

All comments

JayantaPoddar

Hi Duarte,

Do not use the web-adaptor. Access the rest services directory through http, like

http://<ServerName/ServerIP>:6080/arcgis/rest

RebeccaStrauch__GISP

Jayanta, that doesn't work if you have the rest end point disabled, you get the error

you can add ?f=pjson to the end to get a listing, e.g. http://<servername>:6080/arcgis/rest/?f=pjson

But it's not the nice formatting that you would like and you can't access the javascript view direct. We have our public services directory disabled for external use (per esri recommended steps for security). The other option is just looking at it in catalog, but the services directory is a very handy too. I too would like to be able to shut it off externally (i.e. web adapter) but keep it open with the <server:6080>.. I haven't looked to see if anyone has this in the ideas page yet. Have you Duarte?

Edit: fixed typo. added sample link. formatted.

AndyOmmen

Hi Rebecca,

Although the AGS help states to disable the services directory to prevent someone from finding and accessing your services, however if you have services intended for public use disabling the directory may not be the route you want to take. Instead, I would recommend securing the applicable services and/or folders via ArcGIS Server Manager which in turn prevents them from appearing in the services directory. I hope this helps

Thank you

Andy

RebeccaStrauch__GISP

Hi Andy,

Thanks for the insight. I agree, but working with our network services a while back and trying to convince them we needed the SSL cert and port, they kind of got stuck on us needing to everything that was recommended in the various documents. At the time it was easier to do this than to argue that it was a maybe overkill. But having it disabled is of course an inconvenience for us too, not just the public. So I will probably also rethink this although sometimes I still want the rest endpoint to not be viewable even if it is a public (not secure) service.

So, for me, I would still like to have the fine tuning of having the web adapter version being blocked, but the internal machinename:6080 be viewable. There is a case for both. I think that is what Duarte is asking for too. That would be the best of both worlds/environments.

Únete a la Conversación

Los miembros registrados pueden publicar, seguir actualizaciones y más. ¿Nuevo aquí? Regístrate gratis.

Enlaces Rápidos

Community Help
Find useful guides, FAQs, and documents to help you navigate and make the most of Esri Community.