Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Remote Support Options for Proxy PC

    Scheduled Pinned Locked Moved Off-Topic & Non-Support Discussion
    6 Posts 3 Posters 754 Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • M
      mguebert
      last edited by

      Hello,

      The company I work for uses PC's to control hardware devices. The control software is not compatible with most AV and Malware scanning software. So as a result we treat the PC's as controllers rather than workstations.

      This presents problems for customers because they want the PC networked to move the large amount of data the systems generate. So we recommend a second pc that is networked and connected to the controller via a second nic on a different ip and subnet. Then setting up a write only share on the secondary pc. This isolates the controller and all the AV and malware software is on the proxy.

      This leads to my real question, we also want to be able to access the controller via logmein or teamviewer to update software / troubleshoot etc.

      I'm sure there is a way to do this without exposing the controller to the internet. Anyone out there have any options?

      1 Reply Last reply Reply Quote 0
      • H
        heper
        last edited by

        Just put a firewall between the controller subnet & proxy subnet. You can fabricate rule however you want, to only allow what you want.

        M 1 Reply Last reply Reply Quote 0
        • M
          mguebert @heper
          last edited by

          @heper

          I am pretty sure we will end up going with team viewer and as I understand only one port would need to be forwarded from the proxy to the controller. Does this seem correct?

          1 Reply Last reply Reply Quote 0
          • johnpozJ
            johnpoz LAYER 8 Global Moderator
            last edited by

            team viewer doesn't require any sort of port forwarded inbound.

            Why would you not just isolate these devices on their own segment.. Then VPN in and access whatever you want via whatever protocol you need from the vpn connection. This segment(s) you place your devices on can be isolated as much or as little as the customer devices.

            An intelligent man is sometimes forced to be drunk to spend time with his fools
            If you get confused: Listen to the Music Play
            Please don't Chat/PM me for help, unless mod related
            SG-4860 24.11 | Lab VMs 2.7.2, 24.11

            1 Reply Last reply Reply Quote 0
            • H
              heper
              last edited by heper

              so you decided to some crap?

              note to self - check OP's username before making a comment

              1 Reply Last reply Reply Quote 0
              • johnpozJ
                johnpoz LAYER 8 Global Moderator
                last edited by

                that is not OP heper - that is some spammer.

                An intelligent man is sometimes forced to be drunk to spend time with his fools
                If you get confused: Listen to the Music Play
                Please don't Chat/PM me for help, unless mod related
                SG-4860 24.11 | Lab VMs 2.7.2, 24.11

                1 Reply Last reply Reply Quote 0
                • First post
                  Last post
                Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.