Previous Topic

Next Topic

Book Contents

Book Index

Endpoint and Proxies

The Endpoints page shows details about the MOVEit Transfer Endpoint and its associated proxies. Ipswitch Gateway 1.1 supports only one Endpoint.

Initially only three default proxies display for the Endpoint, one for each protocol type: FTP, HTTP, and SSH/SFTP. A proxy listens on a port for traffic of a certain protocol type and forwards traffic of that type to the Endpoint. There are usually three proxies per Endpoint, but there could be more or less.

EndpointsProxiesMain

1

MOVEit Endpoint IP Address

2

Show Details:

  • IP address. The IP address or hostname of the MOVEit Transfer server.
  • Port: The port of the MOVEit Transfer server.
  • Expected Host Name (optional): Host name of the MOVEit Transfer Endpoint. If no host name was given during install, will show N/A.
  • Host Name Verification Policy:
    • Default: The server you connect to must have a cert that matches one of the hostnames listed. A wildcard can occur in the common name (CN), and in any of the subject-alts. The one divergence from IE6 is that we only check the first CN.
    • Allow All: Allows you to connect to any server without performing a hostname check. For testing purposes only - do not use in a production environment.
  • Virtual Path: The MOVEit Transfer server's virtual path.

Delete Endpoint. You must be signed in to the Ipswitch Gateway computer as a MOVEit Transfer sysadmin or orgadmin to delete the Endpoint.

You may need to delete the Endpoint if the MOVEit Transfer server is down and you want that server's proxies to point to a running Endpoint. If you delete the Endpoint, you must configure and verify a new Endpoint. The Ipswitch Gateway Trust Store must contain the x509 certificate for the Endpoint to perform an SSL handshake. See Keys and Certs.

Warning: Deleting the Endpoint will delete all of the Endpoint's proxies too, even if they are running. You cannot undo the deletion of the Endpoint. If you delete the Endpoint, you'll be prompted to configure and verify an Endpoint after sign on.

3

Transfer Rate: The average number of bytes transfered per second by all of the Endpoint's proxies (upload and download) for 1-minute, 5-minute and 15-minute intervals. Numbers are moving averages for each time period.

Click Refresh to update the numbers with current data. Each individual proxy's transfer rate will update too.

4

Proxy protocol type: An icon shows the proxy's protocol: FTP, HTTP or SSH/SFTP.

5

Name: A user-defined name for the proxy. To edit the proxy name clickunder Actions.

For FTP proxies, you'll see:

FTP proxy allows only secure traffic

FTP proxy allows insecure traffic

To edit this option, click to the right of the proxy and stop the proxy if necessary, then click Edit from the same drop-down list. Check or uncheck Allow Insecure FTP.

If the proxy is running, click the proxy name to show or hide transfer metrics for that proxy:

  • Transfer Rate: The average number of bytes transfered per second by the proxy, showing moving averages for 1-minute, 5-minute and 15-minute intervals.
  • Commands (FTP and SFTP only): The average number of commands processed by the proxy, showing moving averages for 1-minute, 5-minute and 15-minute intervals.
  • Running: Shows how long the proxy has been running.
  • Sessions (FTP and SSH/SFTP only): The number of active sessions.
  • Requests (HTTP only): The number of requests

6

Listen On: The IP address and port on which the proxy will listen. No other proxy can listen on that port number for that Endpoint. This value is empty initially. You must click to add a Listen On port before you can run the proxy.

FTP: Listen on addresses and ports display for Explicit FTP and Implicit FTP. See Add a Proxy for details.

HTTP: Listen on addresses and ports display for SSL Address, HTTP Redirect Address, and Optional Redirect Address. See Add a Proxy for details.

7

Send To: The MOVEit Transfer Endpoint address and port to which the proxy will send encrypted data.

8

Key: The key used to verify the proxy with the Endpoint certificate. This value is empty initially. You must click to select a key before you can run the proxy. See also Keys and Certs.

9

Status: The current state of the proxy, either running or stopped. If running, running time displays.

The proxy is stopped initially. You must start it manually after adding and configuring it. Ipswitch Gateway routes external traffic to the Endpoint only through a running proxy. You must stop a proxy before editing the Endpoint or deleting a key that the proxy uses.

An error indicator displays for proxies that could not be restarted on reboot.

10

Actions:

  • Edit: Change any of the proxy settings you selected when creating the proxy, such as the proxy name, Listen On IP address and port, Key, and Send to Port. Note: You must stop a proxy before you can edit it. Everything except a name change requires a computer restart.
  • Start / Stop Proxy: You can start and stop an Endpoint's proxies independently. You must start a proxy manually after adding and configuring it. Proxies restart automatically after computer restart only if they were running when the application stopped. Before a proxy starts, Ipswitch Gateway verifies that the proxy's Endpoint is configured with a valid hash, and that the certificate configured with that Endpoint still matches the certificate presented by the remote server. If a proxy is stopped unexpectedly, you may need to edit the proxy's settings to fix it.
  • Delete: If the proxy is running when you try to delete it, you'll receive a warning message.

11

Add Proxy: Select ftp, ssh/sftp or http. See Add a Proxy for more information.

Remote Access

You can access Ipswitch Gateway remotely if an existing Endpoint is active. On the remote computer, open a browser and enter the Ipswitch Gateway IP address and port. Sign in to Ipswitch Gateway with MOVEit Transfer sysadmin or orgadmin credentials. You may change the Endpoint remotely in this way. Any change requires that new sysadmin or orgadmin credentials be entered for the updated Endpoint to verify that it is in fact an Ipswitch-supported Endpoint and that the current user has sysadmin or orgadmin access to that Endpoint.

If there is no active Endpoint (if an Endpoint is down or has been moved), you must go to the Ipswitch Gateway computer, open a browser and enter the location of the Gateway Configuration Interface (https://localhost:9443). You may then change the existing Endpoint but you will still have to enter valid sysadmin or orgadmin credentials for the updated Endpoint.

When an existing Endpoint is updated, all proxies using that endpoint will automatically point to the new IP address (if any).

MOVEit Transfer Server Changes

If the MOVEit Transfer server's certificate identity changes or the MOVEit Transfer server location moves from one machine to another, go to the Ipswitch Gateway computer, sign in to the Gateway Configuration Interface, and from the sign in page click Re-verify or Delete to reconfigure that Endpoint.