Switch CommCell to WebConsole

The simplest solution is to deploy CommndCenter in DMZ host and use third party port mapping for any any communications between the other Commvault parties and Commserve.

This will make Command Center host passively listening for any traffic and not opening any connections to any other infrastructure clients.

Hello Jacek, 

Thanks for You first respond. In the menatime I created some daigrams about this solutions. Please let me know if that approach is correct. 

Current solution: 

Moreover currently we have almost opened everything to our intranet connection from Commserve. 

This is what we would like to achive: 

This oslution required seperated CommandCenter machine. But Comsmerve need to communicate even with clients, like a Media Agents, File System etc. 

Regards, 

Michal

The future model makes sense. Such change to Command Center access does not need to change anything to Commserve <> clients’ communication rules. 

Hello ​@Jacek Piechucki 

Thanks for suggestion. But good question it is a recommendation for Commvault site or do You have any ether architecture proposal for Commserve server and WebConsole access.

Regards, 

Michal

Sorry, do not get the question…

Hello ​@Jacek Piechucki  

I am looking for the best recommendation to secure Commserve server. I want to switch from CommCell to Command Center and I want to implement the best approach to secure access to Commserve, because it is the most important server from backup infrastructure. 

Regards, 

Mchal

There is a whole large section of documentation you can follow

https://documentation.commvault.com/2024e/expert/securing_commserve_computer.html

Hello ​@Jacek Piechucki 

Thanks for the info. In the meantime I will check the documentation what You are share with me. If there is a question in the future, I will let You know :).

Regards, 

Michal