Answered by:
SCOM R2 WebConsole Remote Access

Question
-
Hello,
I have new install of SCOM R2 (1-RMS, 1-OpsDB, 1-DW/Reporting) Win2003 Enterprise in 1 domain. Set up to monitor co-lo customer servers via gateway server in their domain.
Can someone either walk me through/point to docs on setting up the web console for access from outside(public internet). Intent is for multiple co-lo customers to access their respective server alerts(future gateways for different sites) via the web console from single MG.
I've limited experience with web console install/config, especially for access from internet.
Thanks for any direction.
Tuesday, March 29, 2011 7:29 PM
Answers
-
Hi,
Consider selected the Forms Based login type when the Web Console is installed, and securing the web site with an SSL certificate, behind a firewall. A reference for this model is 'Web Console Security in Operations Manager 2007' (http://technet.microsoft.com/en-us/library/bb735415.aspx).
Note these important points regarding the security implications: (quoting)
- The Web console server must be installed on the root management server if you select Windows Authentication.
- If your users will be accessing the Web console from the Internet, select Forms Authentication.
- The best practice for accessing the Web console from the Internet is to use forms-based authentication with SSL with the Web console.
If you have ISA/TMG as your firewall, you can leverage SSL web listener(s) at the Internet edge to publish and screen your published web console servers.
Good luck,
John Joyner
MVP-OpsMgr- Marked as answer by Vivian Xing Tuesday, April 5, 2011 7:32 AM
Wednesday, March 30, 2011 12:37 AM -
Check following blog by Kevin Holman:
- Marked as answer by Vivian Xing Tuesday, April 5, 2011 7:32 AM
Tuesday, March 29, 2011 10:24 PM -
Hi,
I would like to share information as below:
http://thoughtsonopsmgr.blogspot.com/2010/03/how-to-configure-scom-r2-web-console-to.html
Please remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.- Marked as answer by Vivian Xing Tuesday, April 5, 2011 7:32 AM
Wednesday, March 30, 2011 8:06 AM
All replies
-
Check following blog by Kevin Holman:
- Marked as answer by Vivian Xing Tuesday, April 5, 2011 7:32 AM
Tuesday, March 29, 2011 10:24 PM -
Hi,
Consider selected the Forms Based login type when the Web Console is installed, and securing the web site with an SSL certificate, behind a firewall. A reference for this model is 'Web Console Security in Operations Manager 2007' (http://technet.microsoft.com/en-us/library/bb735415.aspx).
Note these important points regarding the security implications: (quoting)
- The Web console server must be installed on the root management server if you select Windows Authentication.
- If your users will be accessing the Web console from the Internet, select Forms Authentication.
- The best practice for accessing the Web console from the Internet is to use forms-based authentication with SSL with the Web console.
If you have ISA/TMG as your firewall, you can leverage SSL web listener(s) at the Internet edge to publish and screen your published web console servers.
Good luck,
John Joyner
MVP-OpsMgr- Marked as answer by Vivian Xing Tuesday, April 5, 2011 7:32 AM
Wednesday, March 30, 2011 12:37 AM -
Hi,
I would like to share information as below:
http://thoughtsonopsmgr.blogspot.com/2010/03/how-to-configure-scom-r2-web-console-to.html
Please remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.- Marked as answer by Vivian Xing Tuesday, April 5, 2011 7:32 AM
Wednesday, March 30, 2011 8:06 AM