Would like to hear what others are doing related to exposing TessituraWeb to the internet.
What steps did you take to enhance security? Is TessituraWeb running on a separate web server?
Hi Todd - for external access to Tessitura on the Go (TOTG), we run TessituraWeb on a separate server in a DMZ. It sits behind our Cisco ASA firewall. We also use Incapsula in front of it primarily for 2FA (we are using their login protect service), but it also provides an additional level of security.
Thanks,David
David,
Thanks for the reply. Your setup is similar to what I had planned to do however I hadn't thought of implementing two-factor. I think that is a great idea. Right now we're using a VPN app to access TessituraWeb from outside our network.
Are you satisfied with Incapsula? Anyone else out there using two-factor for this?
Todd the VPN app is how our server host has set up our access Tessitura on the Go and I'm finding some screens are not rendering as they should when accessing it that way. Were you experiencing problems through VPN as well or is it due to security reasons you want to connect differently?
Terry - we do not have any issues with TOTG working correctly using the VPN app. I'm reviewing alternatives to provide the most secure method and avoid having to always install the VPN on the client end.