Solved

Amazon EC2 - Security Group Settings

Posted on 2014-04-12
8
305 Views
Last Modified: 2014-04-12
I've already modified security settings on my EC2 instance and have gotten what I wanted from doing that (ability to ping and ability to reach the instance via my browser) but I've probably opened the security settings to broadly and compromised security of the instance. I've attached screen shots of the settings, can you help with this?
EC2-Security-Settings.docx
0
Comment
Question by:cbridgman
  • 4
  • 4
8 Comments
 
LVL 25

Expert Comment

by:Zephyr ICT
Comment Utility
For starters I'd definitely remove the All TCP ports inbound rule ... That's very unsafe!
0
 

Author Comment

by:cbridgman
Comment Utility
The reason that I put the TCP ports thing in there is that I have installed websphere on the server and deployed a web-based application on it. Now that it is there, I need to be able to access that application's user interface through a browser from any PC I'm on. Before adding the ALL TCP entry, I was unable to do that. Once I added it, I was able to access the application via a browser.

Is there another or better way to do that?
0
 
LVL 25

Expert Comment

by:Zephyr ICT
Comment Utility
Yeah ... There should be, find out which ports websphere is using and the other applications, maybe you can use netstat to find out which ports are open when you're using the application?

in a command window type "netstat -an" for example ...

For the record, these are all the ports websphere is using apparently: http://publib.boulder.ibm.com/infocenter/wsdoc400/v6r0/index.jsp?topic=/com.ibm.websphere.iseries.doc/info/ae/ae/adrportbase.htm

I'd start with configuring these instead of the all TCP ports.
0
 

Author Comment

by:cbridgman
Comment Utility
Okay, I will give that a try. I really am a novice at this kind of stuff so your assistance is really appreciated. I will let you know how that goes.
0
New My Cloud Pro Series - organize everything!

With space to keep virtually everything, the My Cloud Pro Series offers your team the network storage to edit, save and share production files from anywhere with an internet connection. Compatible with both Mac and PC, you're able to protect your content regardless of OS.

 
LVL 25

Accepted Solution

by:
Zephyr ICT earned 500 total points
Comment Utility
No problem, I'm still here for a little while ... We all have to learn, I'm still learning every day ;)
0
 

Author Comment

by:cbridgman
Comment Utility
RDP solution works like a charm.

Thanks for the expert help.
0
 

Author Comment

by:cbridgman
Comment Utility
I closed down the ports that are available to TCP and all is working fine.

Again, thanks for the expert help.
0
 
LVL 25

Expert Comment

by:Zephyr ICT
Comment Utility
Ok, glad to hear it!! Thanks!
0

Featured Post

How to run any project with ease

Manage projects of all sizes how you want. Great for personal to-do lists, project milestones, team priorities and launch plans.
- Combine task lists, docs, spreadsheets, and chat in one
- View and edit from mobile/offline
- Cut down on emails

Join & Write a Comment

Moving your enterprise fax infrastructure from in-house fax machines and servers to the cloud makes sense — from both an efficiency and productivity standpoint. But does migrating to a cloud fax solution mean you will no longer be able to send or re…
Even if you have implemented a Mobile Device Management solution company wide, it is a good idea to make sure you are taking into account all of the major risks to your electronic protected health information (ePHI).
This Micro Tutorial will explain how to export DynamoDB tables in Amazon Web Services.
Internet Business Fax to Email Made Easy - With eFax Corporate (http://www.enterprise.efax.com), you'll receive a dedicated online fax number, which is used the same way as a typical analog fax number. You'll receive secure faxes in your email, fr…

743 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

17 Experts available now in Live!

Get 1:1 Help Now