How To Enable HTTPS and Block HTTP for Enterprise Vault Web-Based Communication

Description

The following steps will enable HTTPS and block HTTP (Port 80) for Enterprise Vault(EV) web-based communication. By doing so, you can enhance the security of your EV environment and ensure that all communications are encrypted.

1. Identify the process using Port 80:

   • Open a Command Prompt and run the command: netstat -ao | find ":80"
   • Note the PID (Process ID) associated with Port 80. In this case, it is PID 4.

2. Determine the process using PID 4:

   • Open the Task Manager and go to the "Details" tab.
   • Locate the process with the corresponding PID (4 in this case).
   • In this case, the process is "System".

3. Check the URLs using Port 80:

   • Open a Command Prompt and run the command: netsh http show servicestate view=requestq
   • Look for the registered URLs that are using Port 80.
   • In this case, the following URLs use Port 80:
     • HTTP://+:80/INDEXVOLUMESPROCESSOR/
     • HTTP://+:80/TASKPROCESSOR/
     • HTTP://+:80/ENTERPRISEVAULTSERVICE/SEARCH/
     • HTTP://+:80/ENTERPRISEVAULT/SEARCH/INDEXSERVERSEARCHSERVICE/

4. Understanding the internal communication within EV:

   • The URLs mentioned above are used for internal communication between various components of the Indexing Service.
   • These URLs are used for communication with internal Indexing APIs, such as Elastic Search, for performing searches and indexing new items.
   • By default, this communication happens internally using the HTTP protocol on Port 80.

5. Restrict external access to Port 80 using Windows Firewall:

   • Open the Windows Firewall settings on the EV server.
   • Create a new firewall rule to block incoming connections on Port 80.
   • This will prevent external machines from accessing Port 80 on the EV server.
   • Test the configuration by restarting the EV services and performing searches from both the client and server.

By following these steps, you can enable HTTPS for EV web-based communication and block HTTP (Port 80) to enhance the security of your environment.

For more information on securing sites please refer to the Enterprise Vault™ Upgrade Instructions