Recon Suite Administrator's Guide v8.6 - JAMF Software

Changing the Limited Access Setting
When working in a clustered environment, you may have a JAMF Software Server (JSS) that computers can
access from outside of the network. If you have a second JSS web application that resides in your DMZ,
you can make the administrative interface unavailable by changing the Limited Access setting.
The Limited Access setting has four options:
Full JSS—This is the default option for every JSS. It makes the JSS interface available from anywhere.
Computer and Mobile Device Management—This option is not applicable to the Recon Suite.
• Computer Management Only—This option disables the JSS interface.
Mobile Device Management Only—This option is not applicable to the Recon Suite.
•
Warning: Do not change the Limited Access setting while connecting through a load balancer. Connect
directly to the instance of Tomcat that is inside of your DMZ.
After you change the Limited Access setting, the JSS interface is inaccessible. To make additional changes,
you need to manually modify the web.xml file. If you need to revert the JSS to the default setting (Full
JSS), delete the web.xml file in /Library/JSS/Tomcat/webapps/ROOT/WEB-INF/ and rename
the web.xml.original file to web.xml.
Note: If you upgraded from v8.1 or earlier, the web.xml and web.xml.original files are located in
/Library/Tomcat/webapps/ROOT/WEB-INF/.
Upgrading the JSS automatically resets the Limited Access setting to Full JSS. You will need to change this
setting every time you upgrade.
To change the Limited Access setting:
1. Use a web browser to log in to the desired instance of the JSS.
2. Click the Settings tab.
3. Click the General Settings link.
4. Click the Server Configuration tab.
5. Click the Limited Access JSS tab.
41