User guide

76 DSView Installer/User Guide
Communication between the web server and the DS Management Software environment follows
the same security practices as the DSView management software window architecture. The Node
Manager, running in the web browser, retrieves the node list from the DSAuth Server via the
Security Support Provider Interface (SSPI). The Video Viewer window applet exchanges token
information, via the DSAuth Server, identically to the DSView management software window
security infrastructure.
TCP Ports
In addition to the HTTP port, the session viewer applets require TCP ports to communicate with a
proxy that runs on the web server. There are two ports for this purpose. The first is 8189, which is
used to access the KVM proxy. The second is 8023, which is used to access the Telnet application
proxy. If the Telnet application is not required, then 8191 is the only port needed.
To minimize potential TCP port conflicts or security issues, it is possible to reconfigure the KVM
and serial ports used by the proxy. In this manner, customers may choose the port with which they
feel most comfortable.
Configuring the DSWebview software TCP ports for external access
If external access to the DSWebview software is desired, the following firewall ports must
be opened.
NOTE: You will need to provide DSWebview software users with the server IP address where the DSWebview
software is installed.
NOTE: The DSProxy component must be installed on the same computer as the web server.
Table 5.1: DSWebview Software TCP Ports
Port Application
Port 80 HTTP (not necessary if you are using HTTPS)
Port 443 HTTPS (not necessary if you are using HTTP)
Port 8023 Telnet application proxy (only necessary if you are using the Telnet application)
Port 8189 KVM proxy
Port 8191
DSAuth Server (not necessary if DSAuth Server and the appliance are on the same
side of the firewall)