Network Management
Secure the Orion Platform with an Additional Web Server
This article explains why you should install an Additional Web Server (AWS) in the Orion Platform and how to secure the platform with AWS.
First published date
Last published date
Overview
Product section
Cause
Resolution
In most networks, the Orion NPM server is directly exposed to WAN users through open firewall ports or VPN users who access the LAN environment. This unsecure environment compromises the Orion Platform server when you expose the LAN network to external networks and web browsing.
You can install the Additional Web Server within a DMZ and route the WAN browsing traffic through the DMZ in to maintain WAN user security.
Installing an Additional Web Server (AWS) on an Additional Polling Engine (APE) is not supported. You must have a dedicated server for an AWS.
In a secure environment, LAN users can access the Orion website from both servers. The AWS communicates directly with the Orion Platform database. This environment reduces the load on the primary Orion Platform server, improves browsing performance for LAN users, and provides security for your network.
See Orion Scalability Engines for details.