Is there a way to block Micollab user portal access on the internet (https://<FQDN>/portal/)

[tech1302]

Hi

I`m just wondering whether it is a security risk to leave Micollab user portal open to the public internet ?
Is there a way to only allow access to the user portal via trusted public IP addresses ?

Thanks

 

[TheMaskedMagician]

I don't see why it can be a security risk, as connection is via SSL and portal access has very limited admin access (user level).
Also I don't think there's a way to stop access as it uses same web port as https:443 for access inbound as micollab web services.

You can however control inbound connection from specific public IP's if you are in DMZ mode, but i suppose it'll be not be specifically to /portal but to the MiCollab services as a whole.

I will be very much interested if someone has a better answer.

Clever men learns what Wise men shares!

 

[jpruder]

I know you can make the page internal only, don't think it would be an easy task to limit external users ala whitelist/blacklist