beautypg.com

Scenario 6—configuring a firewall, Server configuration – HP e-CommerceXML Accelerator sa7150 User Manual

Page 77

background image

C H A P T E R 4

Scenario 6—Configuring a Firewall

67

Scenario 6—Configuring a Firewall

This scenario describes the recommended network configuration to
allow a SA7150 to provide SSL services for a single server that also
serves plain-text HTTP documents. Actual procedures for adjusting
the firewall and server configurations vary widely depending upon
the products used, so the steps outlined here are necessarily
approximations and must be adjusted as required by the particulars of
your environment. Please consult your server and firewall
documentation for additional information.

Single SA7150 configured with single server and firewall

Server
Configuration

Servers providing both HTTP and HTTPS services typically have
two instances of the Web Server process configured:

One listening on the standard HTTP port of 80, providing
unencrypted access to non-sensitive information, and

Another listening on port 443 providing access to SSL encrypted
sensitive information.

Server

Firewall

HP e-Commerce/XML Server Accelerator SA7150

Port Number

Connection Type

Content Served

80

HTTP

Non-sensitive

443

HTTPS

Sensitive