Latest Contributions by RandallWilliams

External web adaptor, and myorg is the name of the web adaptor. So if your web adaptor is named ArcGIS, myorg = ArcGIS.  ... View more

Hi Michael Volz‌ -  They don't *NEED* to per-se, at least not in the security sense. In this case, I recommended moving to 10.6 to support any potential clients that might be upgraded past 10.5.x, since it's backward compatible. ... View more

There are multiple critical security issue in older versions of the FlexLM, which is used in Esri's License Manager.  Problem: Warning of two security vulnerabilities in Flexera FlexNet Publisher  I'd install the 10.6 version of the LM, which should be backwards compatible to all earlier versions of ArcGIS Desktop. ... View more

This issue affects Windows 2008, Windows 2008 R2, and Windows 7. It does not affect other operating systems. You can upgrade ArcGIS Server, upgrade the OS, or (not recommended) remove Microsoft Windows update KB4056894 or the combination of KB4056568 and KB4056897. ... View more

As noted by below, 10.1 is long since retired. 10.2.x will be retired in December, and 10.3.x will also be in mature support at that time. Users at versions 10.3.x and below are strongly recommended to upgrade and apply the appropriate patch. ... View more

It's not there in the 10.4.1 server I have access to either. I've seen weird logs when an invalid service name is accessed, but I don't see anything in the log you're looking at. Are you doing any administration in ArcMap? I ask because ArcMap makes SOAP calls to ArcGIS Server and these days would be the most common client to make a SOAP request.  May 30, 2018, 2:54:02 PM    Error handling request to service 'System/RasterProcessing.ImageServer'. The service 'System/RasterProcessing.ImageServer' was not found. Verify the service exists and is started.    Soap That said, I tested with ArcMap 10.6 against my 10.4.1 server, and don't see any errors like that. With that said, it looks like some client somewhere is trying to make a request to a system service that doesn't exist on this resource. Portal only makes restful calls... Might be able to take a look at the web tier logs and correlate the time stamps and find the IP of the client that's reaching out to your server(?) ... View more

RasterProcessing.imageserver is a system tool and exists on all newer ArcGIS Server installations, so it does exist - it's not started by default though. I'm not sure why you're getting an error like that - but even when I start and attempt to access either the SOAP or REST endpoint for this service I get either an http 500 or 400, respectively. May be because I don't have my GIS Server configured in the ImageServer role. The error reads like something made a request to this service and couldn't find it. Which version are you working with? ... View more

Here's the doc for acquiring a token: Acquiring ArcGIS tokens—ArcGIS Server Administration (Linux) | ArcGIS Enterprise  ... View more

HTTP 499 is 'token required'. That means that your service is secured. You'll want to get a token and append it to your request in some fashion. ... View more

Keep in mind that when you set max instances, it's max instances per ArcGIS Server machine in your site. So if you have a 3 machine site, and a service is set to 4 instances, it's possible to have 12 total instances running for that service. This doesn't take into account clustering (where you could assign service workers to specific machine instances), which is deprecated in ArcGIS Server ... View more

Here's a resource - you'll need to run these commands to edit the iptables as root or as a member of the SUDOers group (you can't run sudo (Super-User-DO) unless you're in the SUDOers group).  Howto start tomcat on port 80 without root privileges on linux – Mihail Stoynov's blog  sudo iptables -A PREROUTING -t nat -i eth0 -p tcp --dport 80 -j REDIRECT --to-port 8080 sudo iptables -A PREROUTING -t nat -i eth0 -p tcp --dport 443 -j REDIRECT --to-port 8443 ... View more

Tomcat's defaults are 8080 and 8443, for HTTP and HTTPS respectively. The GIS Server is expecting Tomcat's ports to be bound to 80 and 443. In order to bind to ports this low in Linux, you'll need to use IPTables, authbind or something else to reroute. Don't run Tomcat as root. Can you get to Tomcat on port 443? ... View more

Correct, using the web adaptor instead of exposing the GIS Server on ports 6080/6443 is best practice.  ... View more

OK. I can reach the services directory for the web server providing maps for the Hillsboro Maps application from my office over port 6080, but not 6443 - and not over 80 or 443 either. I think that's the issue, since story maps require HTTPS these days. My guess is that you have port forwarding configured at the router level to forward traffic internally on port 6080, but not 6443. Personally, I'd keep the GIS Server internal, install the web adaptor on the DMZ machine, and allow the web adaptor machines IP access to the GIS Server on ports 6080/6443.  An Important Message About Web Security and Story Maps  ... View more

It would be helpful to see your how the traffic flows. I believe I found your external GIS server by looking at the traffic from Hillsboro Maps , but I don't want to advertise the URL in a public forum like this. If the URL associated with the story map referenced as Hillsboro Maps is the server you're referring to, it doesn't appear that HTTPS is enabled, but that's just based on what I observe from here.  ... View more