Mobicontrol Server and ERG on same host?
- 02 July 2018
- SOTI MobiControl
11 Answers- 0 Upvote
- 2 Followers
11 Answers
Hi Benedict,
ERG is used to enable devices in an external network to access resources in the internal network.
Setting up ERG on the same server as the MobiControl defeats the purpose of using an ERG and is not recommended.
Are you trying to setup ERG for SOTI Surf or Hub?
Please let me know if you have any questions.
Thanks
Technical Support | SOTI Inc. |1.905.624.9828 | support@soti.net | soti.net |
I am planning to use it for SOTI Surf
Hi Benedict,
Do you plan to provide the users access to any internal web page/app via SOTI Surf? Just trying to understand the use case for setting up ERG here.
Thanks
Technical Support | SOTI Inc. |1.905.624.9828 | support@soti.net | soti.net |
Hi SMod,
Sorry to jump on the back of this so many weeks later, but why is the use of ERG not recommended on the same host as Mobicontrol?
We are looking to use ERG with both Soti Surf and Hub from external sources and currently have the ERG on the same host.
Thanks
DanT
Hi Dan,
Following two reasons:
1. There might be a port usage conflict so the ERG will have to be manually setup on another port other than 443
2. Depending upon the amount of traffic passing via ERG, it may affect the MobiControl server performance.
Please let me know if you have any questions.
Thanks
Technical Support | SOTI Inc. |1.905.624.9828 | support@soti.net | soti.net |
Can you clarify types of ERG deployment below?
1. SOTI Surf - Based on my experience, port usage can be modified
2. SOTI Hub - I'm not sure if this can be modified since it is IIS(443). It might conflict with Mobicontrol Webconsole Port(443)
3. ERG for Exchange Filter - Any idea?
4. ERG for Enterprise Content Filter (or same as SOTI Hub) - Any idea?
Hi SMod,
Thanks for your response.
Other than binding a different port in IIS, is there somewhere specific we would need to set the different port in MobiControl?
The only option I've seen is to enter it is on the Gateway URL - 'https://{serverdomain}.com:{newport}
Is this correct, or have I missed something obvious?
Thanks
Hi Dan,
Is this ERG setup for both Surf and Hub?
While specifying the ERG address in the Profile Payload, please remember to include the port along with the server URL.
Thanks
Technical Support | SOTI Inc. |1.905.624.9828 | support@soti.net | soti.net |
Hi Benedict,
1.SOTI Surf - Based on my experience, port usage can be modified
Yes, port can be modified to any available.
2. SOTI Hub - I'm not sure if this can be modified since it is IIS(443). It might conflict with Mobicontrol Webconsole Port(443)
Soti Hub, through apps installer will only enable ‘Search on Server’ functionality. Youwill still need traditional ERG which uses IIS for ‘Redirection’ and ‘Filtering’ purposes unless you plan to open the content repository (webdav or sharepoint etc) to outside traffic over a public interface having only AD authentication as a security layer. You can customize the IIS port to any available (as DSE and Webconsole are 443)
3. ERG for Exchange Filter
4. ERG for Enterprise Content Filter (or same as SOTI Hub)
This is traditional ERG , which uses IIS. You can customize the IIS port to any available (as DSE and webconsole are 443).
Hence, 2, 3 and 4 are not recommended but possible.
Please let me know if you have any questions.
Thanks
Technical Support | SOTI Inc. |1.905.624.9828 | support@soti.net | soti.net |
Hi SMod,
We have use cases for using both Soti Hub and Surf via the ERG.
If the device is on an external network and the profile includes the ERG address does the traffic from the device route over the internet (externally) or via the MobiControl app (internally) to get to the ERG?
Thanks
Hi Dan,
Depending on what is the purpose of ERG, only the traffic for that specific task is redirected to ERG.
For example if you have specified ERG to be used for Surf, once the user opens surf, the traffic goes via ERG, if they open chrome and try to access anything, that goes directly to the internet.
Please let me know if you have any questions.
Thanks
Technical Support | SOTI Inc. |1.905.624.9828 | support@soti.net | soti.net |