Tranquil IT Forum

Hello,

I would like to set up a WAPT server in an OVH VPS (Very Small Enterprise) to manage workstations located outside the network.

The WAPT server would be accessible from the internet, without direct LAN access. (WAPT Enterprise +deb13)

What are the recommended best practices for securing this type of installation: access filtering, ports to expose, protection of the administration console, certificates, etc.?

Thank you for sharing your experience.

Hello,
TCP line 443 should be open from agent to server; that will be sufficient. The agent initiates the connection to the server.
Agent registration must be authenticated, ideally via Kerberos, to prevent unauthorized agents.
See this documentation for other recommendations: https://www.wapt.fr/fr/doc/wapt-securit ... erver-side

Have a good afternoon,
Bertrand

You can then test your Wapt server with this service: https://scan.comitari.fr

It scans the different configurations and tells you about the bad configurations.