Security setup for Event Server

MIP
, , , ,
1

Hello,

  1. Is it possible to set up Event Server in that way to allow only specified IPs to send AnalyticsEvent XML to 9090 port (TCP or HTTP)?

  2. Is it possible to use any auth (at least basic HTTP auth with user/password) for that?

  3. Is it possible to set up HTTPS instead of HTTP for sending AnalyticsEvent XML?

Thank you.

With regards,

Alex.

2

Question 1, Please see the settings on Management Client, Tools - Options

toolsOptionsAnalyticsEvents
toolsOptionsAnalyticsEvents382×401 30.6 KB
Both 2 and 3 the answers are no, it is not possible.

Please note that if you want to submit Analytics Events using authenticated user this is very easy; simply switch to the MIP SDK methods as shown in the Analytics Event Trigger via MIP .Net library sample.

Analytics Event Trigger via XML uses the Event Server port 9090 and no authentication.

https://doc.developer.milestonesys.com/html/index.html?base=samples/analyticseventxml.html&tree=tree_3.html

Analytics Event Trigger via MIP .Net library uses the MessageCommunication and is under login.

https://doc.developer.milestonesys.com/html/index.html?base=samples/analyticseventlibrary.html&tree=tree_2.html

3

Hello @Rie Kiuchi (Milestone Systems)​ ,

Thank you, I followed your advice in (1) - it’s exactly what I need.

Regarding other questions… I need to protect port 9090 from spoofing XML messages. So the MessageCommunication method does not solve the problem at all…

With regards,

Alex.

4

You can disable the port 9090 interface completely if you switch to using MessageCommunication.

My guess is that this would accomplice the protection you need. Is this correct?

5

Maybe - yes, if it is possible to use MessageCommunication way without MIP .Net library. Is it possible?

6

No. MessageCommunication requires MIP .Net library. If you cannot use this it is not an option..