Latest revision as of 12:52, 11 May 2017

Overview

Swivel appliances from version 2.0.9 onwards contain a proxy server which separates management from additional features that may require internet access, and is therefore an enhancement to security.

• The Swivel administration console uses 8080/pinsafe. This can also be further protected with an IP filter, see the Filter IP How to Guide and strong or Two Factor Authentication.

• External access is through the proxy port 8443/proxy or 8443/<app name>

AGENT-XML authentication requires the use of port 8080.

Proxy port features

The proxy port runs on port 8443 and supports the following features:

• Single Channel images (TURing, BUTton, PATtern) and PINpad

• ChangePIN

• ResetPIN

• Mobile Phone Client provisioning, security strings and One Time Codes

• Security String index to tell the user which Security String or OTC to use

• Dual Channel Confirmed Message

• Taskbar connectivity

• Dual Channel SMS requests

Prerequisites

Swivel Appliance 2.0.9 onwards

Swivel appliances up to an including appliance build 2.0.12 have the old proxy and need to be upgraded for the Mobile Phone Provisioning.

Testing

See if a TURing image can be obtained through the proxy port:

https://<IP>:8443/proxy/SCImage?username=test

Check the Swivel logs

Known Issues

For firewall configuration, the proxy server uses the IP address of the server for communication rather than localhost.

Appliance build 2.0.9a may not pass the authentication credentials to the proxy server

Troubleshooting

Error Messages