Hello,
Is it possible to install WAPT server in the cloud?
The idea would be to manage the configuration of Windows workstations installed in different stores without having to configure a VPN, etc., and to be able to do so without having to establish a remote connection on each workstation every time we need to install or update software.
The different stores are not connected to each other; each store only has internet access.
Is WAPT secure for use over the internet? Or can it be secured (via a reverse proxy or other means)?
Sincerely,
Ed
Using WAPT on a cloud
Forum Rules
Community Forum Rules
* English support on www.reddit.com/r/wapt
* French community support is available on this forum
* Please prefix the topic title with [RESOLVED] if it is resolved.
* Please do not edit a topic that is tagged [RESOLVED]. Open a new topic referencing the old one.
* Specify the installed WAPT version, full version, and build number (2.2.1.11957 / 2.2.2.12337 / etc.) as well as the Enterprise/Discovery edition.
* Versions 1.8.2 and earlier are no longer supported. The only questions accepted regarding version 1.8.2 are related to upgrading to a supported version (2.1, 2.2, etc.).
* Specify the server OS (Linux/Windows) and version (Debian Buster/Bullseye - CentOS 7 - Windows Server 2012/2016/2019).
* Specify the OS of the administration/package creation machine and the machine with the problematic agent, if applicable (Windows 7/10/11/Debian 11/etc.).
* Avoid asking multiple questions when opening a topic, otherwise it may be ignored. If there are multiple topics, open separate topics, preferably one after the other and not all at the same time (i.e., do not spam the forum).
* Include code snippets, screenshots, and other images directly in the post. Links to Pastebin, Bitly, and other third-party sites will be systematically removed.
* As with any community forum, support is provided voluntarily by members. If you require commercial support, you can contact Tranquil IT's sales department at 02.40.97.57.55
Community Forum Rules
* English support on www.reddit.com/r/wapt
* French community support is available on this forum
* Please prefix the topic title with [RESOLVED] if it is resolved.
* Please do not edit a topic that is tagged [RESOLVED]. Open a new topic referencing the old one.
* Specify the installed WAPT version, full version, and build number (2.2.1.11957 / 2.2.2.12337 / etc.) as well as the Enterprise/Discovery edition.
* Versions 1.8.2 and earlier are no longer supported. The only questions accepted regarding version 1.8.2 are related to upgrading to a supported version (2.1, 2.2, etc.).
* Specify the server OS (Linux/Windows) and version (Debian Buster/Bullseye - CentOS 7 - Windows Server 2012/2016/2019).
* Specify the OS of the administration/package creation machine and the machine with the problematic agent, if applicable (Windows 7/10/11/Debian 11/etc.).
* Avoid asking multiple questions when opening a topic, otherwise it may be ignored. If there are multiple topics, open separate topics, preferably one after the other and not all at the same time (i.e., do not spam the forum).
* Include code snippets, screenshots, and other images directly in the post. Links to Pastebin, Bitly, and other third-party sites will be systematically removed.
* As with any community forum, support is provided voluntarily by members. If you require commercial support, you can contact Tranquil IT's sales department at 02.40.97.57.55
-
dcardon
- WAPT Expert
- Messages: 1932
- Registration: June 18, 2014 - 09:58
- Location: Saint Sébastien sur Loire
- Contact :
Community version or enterprise version? It works in the Enterprise version, I don't know about the community version.
Denis Cardon - Tranquil IT
Share your experiences on WAPT! Send us your blog and article URLs in the "Your Opinion of the forum, and we'll feature them on the WAPT
Share your experiences on WAPT! Send us your blog and article URLs in the "Your Opinion of the forum, and we'll feature them on the WAPT
Hello,
This is the type of configuration we use in the Community edition, and it works without any problems.
We have several workstations spread across thirteen sites that contact a server via the internet. The connection is made from the workstation to the server.
The data flow between the workstations and the server is encrypted using SSL.
This allows us to manage the configuration of the workstations.
I imagine it would work with a dedicated virtual server on any cloud platform.
Best regards,
This is the type of configuration we use in the Community edition, and it works without any problems.
We have several workstations spread across thirteen sites that contact a server via the internet. The connection is made from the workstation to the server.
The data flow between the workstations and the server is encrypted using SSL.
This allows us to manage the configuration of the workstations.
I imagine it would work with a dedicated virtual server on any cloud platform.
Best regards,
-
dcardon
- WAPT Expert
- Messages: 1932
- Registration: June 18, 2014 - 09:58
- Location: Saint Sébastien sur Loire
- Contact :
The issue is not with connection encryption, but with client certificate authentication on all nginx entry points (to avoid having your server too open to the general public)
Denis Cardon - Tranquil IT
Share your experiences on WAPT! Send us your blog and article URLs in the "Your Opinion of the forum, and we'll feature them on the WAPT
Share your experiences on WAPT! Send us your blog and article URLs in the "Your Opinion of the forum, and we'll feature them on the WAPT
It's definitely more secure with client certificates.
In a community environment, to make it even more secure, you can also filter communications based on the websites' IP addresses (provided they are static), and require a password during the initial installation of the WAPT client.
I just wanted to say that it's possible and it works in a community environment, but it's less secure, that's true.
Have a good day.
In a community environment, to make it even more secure, you can also filter communications based on the websites' IP addresses (provided they are static), and require a password during the initial installation of the WAPT client.
I just wanted to say that it's possible and it works in a community environment, but it's less secure, that's true.
Have a good day.
Hello, and thank you for your replies.
Whether it's the community or enterprise version, it's therefore possible provided that only the WPAT server's dedicated ports are left open to the internet, and possibly filtering based on client IP addresses (if possible).
Regards,
Ed
Whether it's the community or enterprise version, it's therefore possible provided that only the WPAT server's dedicated ports are left open to the internet, and possibly filtering based on client IP addresses (if possible).
Regards,
Ed
