Improve company productivity with a Business Account.Sign Up

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 343
  • Last Modified:

Amazon EC2 - Security Group Settings

I've already modified security settings on my EC2 instance and have gotten what I wanted from doing that (ability to ping and ability to reach the instance via my browser) but I've probably opened the security settings to broadly and compromised security of the instance. I've attached screen shots of the settings, can you help with this?
EC2-Security-Settings.docx
0
cbridgman
Asked:
cbridgman
  • 4
  • 4
1 Solution
 
Zephyr ICTCloud ArchitectCommented:
For starters I'd definitely remove the All TCP ports inbound rule ... That's very unsafe!
0
 
cbridgmanAuthor Commented:
The reason that I put the TCP ports thing in there is that I have installed websphere on the server and deployed a web-based application on it. Now that it is there, I need to be able to access that application's user interface through a browser from any PC I'm on. Before adding the ALL TCP entry, I was unable to do that. Once I added it, I was able to access the application via a browser.

Is there another or better way to do that?
0
 
Zephyr ICTCloud ArchitectCommented:
Yeah ... There should be, find out which ports websphere is using and the other applications, maybe you can use netstat to find out which ports are open when you're using the application?

in a command window type "netstat -an" for example ...

For the record, these are all the ports websphere is using apparently: http://publib.boulder.ibm.com/infocenter/wsdoc400/v6r0/index.jsp?topic=/com.ibm.websphere.iseries.doc/info/ae/ae/adrportbase.htm

I'd start with configuring these instead of the all TCP ports.
0
Improve Your Query Performance Tuning

In this FREE six-day email course, you'll learn from Janis Griffin, Database Performance Evangelist. She'll teach 12 steps that you can use to optimize your queries as much as possible and see measurable results in your work. Get started today!

 
cbridgmanAuthor Commented:
Okay, I will give that a try. I really am a novice at this kind of stuff so your assistance is really appreciated. I will let you know how that goes.
0
 
Zephyr ICTCloud ArchitectCommented:
No problem, I'm still here for a little while ... We all have to learn, I'm still learning every day ;)
0
 
cbridgmanAuthor Commented:
RDP solution works like a charm.

Thanks for the expert help.
0
 
cbridgmanAuthor Commented:
I closed down the ports that are available to TCP and all is working fine.

Again, thanks for the expert help.
0
 
Zephyr ICTCloud ArchitectCommented:
Ok, glad to hear it!! Thanks!
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

Featured Post

Get your problem seen by more experts

Be seen. Boost your question’s priority for more expert views and faster solutions

  • 4
  • 4
Tackle projects and never again get stuck behind a technical roadblock.
Join Now