Web console is not accessible through IP address

[chetankb1 2]

Hi,

I have installed latest version of ERA on windows server 2016 which works properly through localhost. But whenever I am trying to access it using IP address it doesn't, not even from the same server. 

Firewall rules are already created to allow its traffic.

For more information please refer attached screenshot and help me to resolve this problem.

Thank you.

 

 

 

 

[Katarina 3]

Hello,

try to open ERA Web Console without port 8443:  https://[IP_Address]/era

Port 8443 is used to connect to ERA Web Console when ERA Virtual Appliance is installed.

Edited March 7, 2017 by Katarina

[chetankb1 2]

Now I am getting 404 error, please find attached screenshots.

[MartinK 378]

Could you please run command:

netstat -ta -b -p TCP

in Administrator command line and verify that Tomcat (Java) is actually listening on all IP addresses (interface) and on correct TCP port?

Have you tried to restart tomcat service? Tomcat will be listening only on interfaces that have been available during startup.

[chetankb1 2]

I have already tried restart tomcat service.

please see below netstat response 

Edited March 8, 2017 by chetankb1

[MartinK 378]

According to your previous screenshot (the one with 404 error), you can see that this error is generated by MS IIS server, and not by tomcat. My guess is that tomcat is not properly started, or it is listening only on IP addresses that were free. You will most probably have to handle this conflict, for example by changing Tomcat ports in its configuration...

[chetankb1 2]

I have changed port from 8443 to 8012 and it is listening.

Still same problem persist.

Let me tell you one more thing, I have installed Sefetica server on the same host, is that creating this problem?

 

 

 

[MartinK 378]

Unfortunately I do not know what Safetica does, but I guess it is not interfering network connections.

Could you please try to disable firewall and check whether connections from outside works -> only to be sure firewall rules are correctly defined, especially after port changes you made.

[chetankb1 2]

Firewall rules are correct, I am able to telnet on all the required ports.

Please see the below image which will show you, its downloading the certificates from Safetica and not from ERA.

 

 

[MartinK 378]

I do no know Safetica, but it is probable that it is only performing HTTPS introspection, and it reject connection to hostname "192.168.1.225" because this hostname/IP address is not present in ERA TLS/SSL certificate.

Have you tried to bypass this check by clicking on "Proceed to 192.168.1.225 (unsafe)"? Will it load ERA or something different?

[chetankb1 2]

"Proceed to 192.168.1.225 (unsafe)" route me towards "HTTP Error 404.0 - Not Found" page.