[How-To] Access UEB Remotely with VPN Agent on UEB
-
So I've longed for a way to access my UEB locally via a local browser, basically so I didn't have to RDP to a machine with a GUI and THEN access it. It seems like an odd request, but I did find a way. I hope this is beneficial for anyone.
The trick lies in having a jump server on the same network as your Unitrends box, and using SSH tunnels. I have a jump server that I can access both over the WAN and over my Pertino VPN. You can use either PuTTY or KiTTY for this task. Once you've got the session info all setup, go to Connection > SSH > Tunnels. For the source port, you can technically use anything, but for my example I used 10001. Using something that nothing else will likely be using is a good idea.
The destination will be the IP of your Unitrends box followed by ":443". See example below.
Now, in order to access the Unitrends box, open your preferred browser and enter this (based on my example):
https://localhost:10001/recoveryconsole
If you simply enter https://localhost:100001, it will redirect to the URL you need but drop the :10001 which will not complete the connection, so make sure you keep whatever port you used on there. Bam! That's all you need to do! It's quite handy and I'm realizing how handy SSH tunnels are!
Thanks!
-
Can't you install Pertino directly on the UEB?
-
@Dashrender said:
Can't you install Pertino directly on the UEB?
No, if I remember correctly the UEB virtual appliance runs on CentOS 5, which Pertino doesn't support.
-
Also, is your WAN not part of your trusted network? If it is part of your trusted network, why can't you just open the webpage direct?
-
I've seen times when this is pretty handy. For example: you have a local physical Unitrends appliance for backups, but no colo and can't stomach the Unitrends Vault 2 Cloud costs, but you can get storage on a virtual platform from another vendor, and maybe you already have something hosted there. You spin up the UEB, but you don't have full access to that network. You can use your other VM as a jump server in this way.
Also, I'm not 100% positive, but I'm pretty sure that a newly-deployed UEB will be on CentOS6.
-
@art_of_shred said:
Also, I'm not 100% positive, but I'm pretty sure that a newly-deployed UEB will be on CentOS6.
Good to know. I believe ours is still on CentOS5, which is expects we deployed it almost a year ago.
-
@coliver said:
@Dashrender said:
Can't you install Pertino directly on the UEB?
No, if I remember correctly the UEB virtual appliance runs on CentOS 5, which Pertino doesn't support.
It's CentOS 6.5 on the newest versions.
-
@art_of_shred said:
Also, I'm not 100% positive, but I'm pretty sure that a newly-deployed UEB will be on CentOS6.
Yep. they are CentOS6.5. Though you'd have to do a full re-do of your UEB to get to CentOS6.5 from a previous VM using CentOS 5, there is no direct upgrade path.
-
@art_of_shred said:
I've seen times when this is pretty handy. For example: you have a local physical Unitrends appliance for backups, but no colo and can't stomach the Unitrends Vault 2 Cloud costs, but you can get storage on a virtual platform from another vendor, and maybe you already have something hosted there. You spin up the UEB, but you don't have full access to that network. You can use your other VM as a jump server in this way.
Also, I'm not 100% positive, but I'm pretty sure that a newly-deployed UEB will be on CentOS6.
Yes, new UEBs I believe are on CentOS 6, but my template is a couple years old at least.
-
Yes, Pertino can go directly on the "new" installs of UEB. Not if you have an old CentOS 5 one. You can always reinstall now.
-
@scottalanmiller said:
Yes, Pertino can go directly on the "new" installs of UEB. Not if you have an old CentOS 5 one. You can always reinstall now.
True enough. I might have to do that.
-
@scottalanmiller said:
Yes, Pertino can go directly on the "new" installs of UEB. Not if you have an old CentOS 5 one. You can always reinstall now.
I guess the new beta's are likely CentOS 7?
-
@thecreativeone91 That would be cool. Hopefully someone gets one installed shortly and we get a chance to take a look.
-
@thecreativeone91 said:
@scottalanmiller said:
Yes, Pertino can go directly on the "new" installs of UEB. Not if you have an old CentOS 5 one. You can always reinstall now.
I guess the new beta's are likely CentOS 7?
Pretty sure it's CentOS6
