In order to make ServiceDeskPlus – MSP available for users in Internet, let us assume the following scenarios.
Scenario 1: ServiceDesk Plus – MSP is installed in LAN and should be available in LAN and WAN:
Assume ServiceDesk Plus – MSP is installed on a server in the LAN with IP address 192.168.200.254 on port 80, and the hostname of the server is “servicedesk-lan”.
Step 1: Register an IP address (say, 64.12.13.11) and a public hostname (like servicedesk.yourdomain.com) with your Service Provider.
Step 2: The IP address for “servicedesk.yourdomain.com” should resolve to “64.12.13.11”. (This will be predominantly handled by the Service Provider).
Step 3: Configure Firewall rules (or access-list in router) redirecting “http” requests on IP address “64.12.13.11” to the LAN ipaddress “192.168.200.254”.
Step 4: Configure the alias URL in ServiceDesk Plus – MSP under Admin->Self Service Portal Settings. [One point to note is that all notifications will now be sent with the Public URL. It is understood that the Public URL will also be reachable within the LAN].
Scenario 2: ServiceDesk Plus – MSP is installed in DMZ and should be available in LAN and WAN:
Installing ServiceDesk Plus – MSP on a server within the DMZ should help prevent the security risks in installing ServiceDesk Plus – MSP on a server in LAN/WAN.
Assume SDP is installed on a server within DMZ with a IP address 192.168.225.254 and the hostname is “servicedesk-dmz” on port 8080.
MSSQL is the database and the database server is in LAN: You have to configure firewall rules in such a way that the application can reach the Database server in LAN on the MSSQL port ( Default Port : 1433 )
MSSQL is the database and the database server is in DMZ: Port 1433 should be reachable from the ServiceDesk Plus – MSP server in DMZ.
PGSQL is the database that is bundled with the product: . In such case, there are no additional configurations required.
Step 1: You have to configure firewall rules in such a way that users in LAN are able to access the application as http://servicedesk-dmz/ [ Note that the application is installed on port 8080, but users have to access it through port 80]. In such a case, you have to redirect “http” requests on port 80 to port 8080 on the ipaddress 192.168.225.254.
Step 2: Register an IP address (say, 64.12.13.11) and a public hostname (like servicedesk.yourdomain.com) with your Service Provider.
Step 3: The IP address for “servicedesk.yourdomain.com” should resolve to “64.12.13.11”. (This will be predominantly handled by the Service Provider).
Step 4: Configure Firewall rules (or access-list in router) redirecting “http” requests on IP address “64.12.13.11” on port 80 to the LAN ipaddress “192.168.225.254” on port 8080.
Step 5: Configure Alias URL settings in the Application.
Scenario 3: ServiceDesk Plus – MSP is installed in a server in WAN without firewall rules:
This is highly not recommended due to security risks on Tomcat, JBOSS application server, PGSQL (or) MSSQL, even though the hardware box may be hardened.