Network Management

Secure the Orion Platform with an Additional Web Server

This article explains why you should install an Additional Web Server (AWS) in the Orion Platform and how to secure the platform with AWS.

First published date

10/30/2018 2:23 PM

Last published date

11/28/2022 5:24 AM

Overview

This article explains why you should install an Additional Web Server (AWS) in your Orion Platform and how to secure the Orion Platform with Orion AWS. 

Product section

Orion Platform

Cause

N/A

Resolution

In most networks, the Orion NPM server is directly exposed to WAN users through open firewall ports or VPN users who access the LAN environment. This unsecure environment compromises the Orion Platform server when you expose the LAN network to external networks and web browsing.

 

You can install the Additional Web Server within a DMZ and route the WAN browsing traffic through the DMZ in to maintain WAN user security.

Installing an Additional Web Server (AWS) on an Additional Polling Engine (APE) is not supported. You must have a dedicated server for an AWS.


In a secure environment, LAN users can access the Orion website from both servers. The AWS communicates directly with the Orion Platform database. This environment reduces the load on the primary Orion Platform server, improves browsing performance for LAN users, and provides security for your network.


See Orion Scalability Engines for details.