Enabling Secure Tenant Access to the Web Console
If you want tenants to use the Web Console, you must configure the Web Console to communicate with the CommServe computer through the proxy. You will need to configure third-party port mappings (TPPM) for incoming connections.
Before You Begin
You must install and configure the Commvault proxy. For instructions, see Setting Up the Commvault Proxy for the Service Provider.
Follow the procedure that corresponds to the number of Web Console computers that you want to configure for third-party port mappings.
Configuring Port Forwarding Gateways Through a Single Web Console Computer
- From the CommCell Browser, right-click the Web_Server_client and then click Properties.
The Client Computer Properties dialog box appears.
- Click Network.
The Network Properties dialog box appears.
- On the Network Route Configuration tab, click the Options tab.
- Select Access Web Server via following proxy. This option automatically enables the IIS port (dynamic) on the computer hosting the web server for third-party connections.
- From the Remote Proxy list, select the Web Console computer.
- In the Port Number box, specify a port to be used by the Web Console computer to access the Web Server. This is a local port in the Web Console computer that will be mapped to access the Web Server.
- Click OK.
- In the CommCell Browser, right-click the name of each computer that uses third-party port mappings, and then click All Tasks > Push Network Configuration.
- Verify that your network configuration was pushed successfully by looking for a push network event in the Event Viewer.
- Restart Commvault Tomcat services on the Web Console computer.
Configuring Port Forwarding Gateways Through Multiple Web Console Computers
For each Web Console computer that you want to configure, you can use the CommServe Port Forwarding Gateways Configuration workflow to insert the same source/destination firewall client groups and destination ports for all clients that require port forwarding gateways, for a chosen or customized port forwarding gateway configuration.
Before You Begin
- Download the CommServe Port Forwarding Gateway Configuration workflow from the Commvault Store. For more information, see Download Workflows from Commvault Store.
- Run the CommServe Port Forwarding Gateway Configuration workflow.
The CommServe Port Forwarding Gateway Configuration Workflow Options dialog box appears.
- Click the Insert port forwarding configuration option button, and then click OK.
The Select CS/Remote Webserver as Destination Client dialog box appears.
- From the Select Client list, select the remote Web Server as the destination client, and then click Next.
The Select configuration for each client dialog box appears.
- Click the check box for a port forwarding gateway configuration, and then enter the desired clients for the configuration, each separated by a semi-colon (;).
Repeat this step for additional port forwarding gateway configurations.
- Click the Select and assign common configuration to all clients check box.
- Click the Next button.
The Select and assign common configuration dialog box appears.
- Optional: From the Select firewall source client group list, select the source client group.
- Optional: From the Select firewall destination client group list, select the destination client group.
- In the Provide source port field, enter the port that will be common to all clients you entered for the first configuration selected in Step 4, above.
- Click the Submit button.
- If you selected two or more configurations in Step 4, above, additional Select and assign common configuration dialog boxes will appear. Repeat Step 7 through Step 10, above, for each additional configuration.
Restart Commvault Tomcat services on the Web Console computer.
What To Do Next
Last modified: 2/21/2020 4:30:51 PM