Related Tips & Info

Restrict Access to ZENworks Control Center

thsundel
0 Likes

Under the following directory you will find a file named context.xml:



/opt/novell/zenworks/share/tomcat/tomcat/conf/



Edit the file with your favorite text editor and add the following line between "<context>" and "</context>" tags:



<Valve className="org.apache.catalina.valves.RemoteAddrValve" allow="192.168.0.*"/>


Then only hosts in the 192.168.0.0/24 network would get access to ZCC.



After saving the edited file you need to restart ZENworks before the changes take effect.

Labels:

How To-Best Practice
Comment List
  •  
    Hi all, this blocks access to other zenworks services which the agent uses
    like:
    zenworks-useradmin
    zenworks-coreadmin
    zenworks-ping

    I'm looking for something to just block zcc ./zenworks access.

  •  
    At least with ZCM 11 SP2 I tested with, this setting prevents also clients from communicating with this primary (such as downloading bundles). Therefore unfortunately not only effective for ZCC and not usable.
  •  
    It is an issue I concern while testing ZCM. zcc is accessible from the world,
    and I do not find it is mentioned in the documents.
    Thank you for the tip. I run ZCM on SLES, so I find it is easier to set up a rule
    in iptables firewall. The context.xml file maybe overwritten during update.

    I also notice that 127.0.0.1 is also needed in the allow list, otherwise zman return error 13.
Related
Recommended

Resources

Support
Documentation
Training
CyberRes Academy
Partner Portal
Contact us
Compliance
Help
Company
Privacy Policy
Terms of Use
Accessibility
Anti-Slavery Statement
Support
How To Buy
Careers
Investor Relations
The opinions expressed above are the personal opinions of the authors, not of Micro Focus. By using this site, you accept the Terms of Use and Rules of Participation. Certain versions of content ("Material") accessible here may contain branding from Hewlett-Packard Company (now HP Inc.) and Hewlett Packard Enterprise Company. As of September 1, 2017, the Material is now offered by Micro Focus, a separately owned and operated company. Any reference to the HP and Hewlett Packard Enterprise/HPE marks is historical in nature, and the HP and Hewlett Packard Enterprise/HPE marks are the property of their respective owners.