Firewalls - Ports - Proxies

[Gil Heiman]

There is much confusion about the ports that need to be opened to allow Collanos to communicate with other peers.

In most scenarios, users will NOT need to open any ports as Collanos defaults to standard http/tcp ports (80, 443) which are already open for standard internet usage (web browsing, IM, etc.).
In certain scenarios, where application firewalls are more restrictive, users may have to open port 9701 to allow replication to take place between peers.

Users may also see a significant boost in replication speed if they open port 9701 as this allows faster communication than the standard port 80.

We advise users with more restrictive firewalls to post their firewall model, unique settings and recommendations in this user forum so that other members can benefit from this knowledge.

Regarding port 8443 which we suggested to several users to open to allow access to the new Central User Directory (CUD), this is no longer required.
From now on we have standardized on using port 443, the standard port used over the internet for accessing https sites. Users no longer need to do any manual changes or updates to get access to the CUD.

Users behind proxies (proxy) may need to do manual changes to one of Collanos' installation files called workplace.ini which is in the same folder where you installed the Collanos application (not where you are storing the Collanos data).
If indeed you have a proxy that is blocking you from running/using Collanos, open workplace.ini and make the following changes:

Depending on your proxy server you need to setup up to 4 parameters through the workplace.ini file in the Collanos Program Directory (we are going to simplify this again as soon as possible).
The 4 parameters that can be set there are:
-Dhttp.proxyHost=192.168.40.78  (just an example, it is the IP address of the proxy)
-Dhttp.proxyPort=80
-Dhttp.proxyUser=exampleuser (your user ID for the proxy server, if needed)
-Dhttp.proxyPassword=examplepassword (your proxy server password, if needed)
 
These parameters are only required if you have a proxy server in place.

For more firewall and proxy information please read the related posting:
http://community.collanos.com/index.php/topic,526.msg1456.html#msg1456

[Urs F. Kirchgessner]

hi there,
would be helpful to provide further instructions for major internet security systems (northern, pc cillin or orthers) for installation procedure. I personnally couldnt install collanos because of unknown reasons.

[nichiconn]

Spybot Search and Destroy shows two registry entries ("problems") under Microsoft.Windows.AppFirewallBypass so I'm wondering whether these might be for Workplace or if it's safe to have Spybot S&D "fix" (remove) these. 

Here is the Spybot S&D report for the registry values in question:

Microsoft.Windows.AppFirewallBypass: [SBI $9FD0556E] Settings (Registry value, nothing done)
  HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List\C:\WINDOWS\system32\usmt\migwiz.exe

Microsoft.Windows.AppFirewallBypass: [SBI $9DD943AA] Settings (Registry value, nothing done)
  HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List\C:\WINDOWS\system32\usmt\migwiz.exe

thank you,
connie

[fherrero]

Our proxy settings requires to specifically state the URL of the proxy as an exception.

Example:

Proxy: proxy.company.local
Port: 80
Exception: proxy.company.local; 10.*; localhost

Is there a way to set up these setting in Collanos Workplace?

Regards,
Francisco