The information in this article applies to Prism Suite v.9 and newer, PwrSmart 3.0 and newer.

NBT Proxy Server is a small application installed on a Microsoft IIS server that accepts HTTP or HTTPS requests from Prism clients or the Prism Console outside the network, and it invokes the Prism Server on their behalf.

Enabling this feature means that Prism Channel Servers that are behind a firewall can still be accessed by the Prism clients or Consoles outside the firewall without using a VPN. This is useful for managing PCs (usually laptops) that are sometimes on the corporate network and sometimes outside the corporate network, or even ones that are never on the corporate network.

Installing the NBT Proxy Server

1) Identify the IIS machine where the NBT Proxy Server will be installed.

a) Using the IIS administration console, identify the specific Site where the NBT Proxy Server will be installed (e.g., "Default Web Site"). Open the Site's Properties, select the ASP.net tab, and verify that the "ASP.NET version" is 2.0 or greater.

b) If you wish to use HTTPS, enable SSL for the site. Consult IIS help documentation for more information. It is strongly recommended that SSL be used for increased security.

2) From the Prism installation folder on the machine where Prism is installed (by default, C:\Program Files\New Boundary\Server), copy the NBTProxyServer.msi file from your Prism Server to the IIS machine.

3) Launch the NBTProxyServer.msi file on the IIS machine.

4) On the Welcome dialog, press Next.

5) On the Select Installation Address dialog, select the appropriate Site from the dropdown. Press Next.

a) Caution: Do not change the Virtual directory setting, "NBTProxyServer". This value is required by Prism Clients.

6) On the Confirm dialog, press Next. This will install NBT Proxy Server application.

7) On the Installation Complete dialog, press Close.

Using the Web Proxy Server for Client or Console Communication

Within the Prism Console, choose File | Client Settings or File | Console Settings, then go to the Web Proxy Server tab. There are up to four settings to configure:

Use Web Proxy Server

No: Do not use the Web Proxy Server for communication to the Channel Server. This is the default setting.

Yes: Always use the Web Proxy Server. All communication will occur over HTTP through the Proxy Server.

Auto: With this setting, the Client or Console will first try the default channel communication. If that communication fails, it will use the Web Proxy Server and communicate over HTTP.

Web Proxy Server Host

This is the address of the Web Proxy Server that you installed on IIS. It should not include the protocol (http:// or https://). It can be a domain name (e.g., www.example.com) or a routable IP address.

Connect to the Web Proxy Server using port

This specifies the Web Proxy Server's port number. Typically 80 is used for HTTP and 443 for HTTPS.

Use Secure Sockets Layer

Check this box to use SSL (HTTPS).

Modifying Firewall Rules, Hosts File

Depending on how your network perimeter is secured, you will need to create firewall “rules” or make changes to the IIS server’s hosts file in order to map the external Web Proxy Server host address to the internal Prism Server. Please contact support@newboundary.com if you need assistance with firewall or hosts file configuration.

Notes

· If you are still using Prism Suite versions 9 or 10, you will not be able to install the NBT Proxy Server on an IIS machine running Windows Server 2008. The version that supports Windows Server 2008 is included with Prism Suite versions 11 and newer.

· If you plan to use HTTPS, the SSL certificate you use cannot be internally created, it must be purchased from a certificate authority. Also, you cannot use a wildcard cert (e.g., *.YourCompany.com). It must be for a full domain name (e.g, www.YourCompany.com).