CSP Gateway Configuration Guide - InterSystems Documentation

CSP Gateway Operation and Configuration
Menu Item
About CSP Gateway
Action
Shows the CSP Gateway version and the hosting Web server environment.
The CSP Web Gateway Documentation (online help on configuring the CSP Gateway) is available on the CSP Web Gateway
Management page. From the [Home] > [Configuration] page of the System Management Portal, click CSP Gateway Management
and then click Help.
By default, this takes you to the private Web server. To see the CSP Web Gateway Management page for your production
Web server, substitute localhost for localhost:57772 in the URL, as
http://localhost:/csp/bin/Systems/Module.cxw.
For more information on default Caché Web server port numbers, see the WebServerPort entry of the Caché Advanced
Configuration Settings Reference.
2.1.1 Security Considerations with CSP Web Gateway Management Page
By default, only clients local to the Gateway’s hosting computer are allowed access to the CSP Web Gateway Management
page. The browser through which the management forms are accessed must be running on the same machine as the Web
server and CSP Gateway. For example:
http://localhost:/csp/bin/Systems/Module.cxw
You can add additional clients to the list of authorized administrators by adding the client IP addresses to the
System_Manager parameter in the SYSTEM section in CSP.ini (which is found in C:\Intersystems\Cache\CSP\bin). The
System_Manager parameter represents a comma- (or plus-, + ) separated list of clients (by IP address) who may access
the CSP Web Gateway Management page. The directive shown below grants access to three remote clients in addition to
the default local access.
[SYSTEM]
System_Manager=190.8.7.6, 190.8.7.5, 190.8.7.4
For new Gateway installations, for which there is no local browser available, manually create this configuration setting by
editing CSP.ini.
The System_Manager parameter in CSP.ini is equivalent to the Systems Manager Machines setting, found under the Default
Parameters section of the CSP Web Gateway Management page. You can specify wildcard and numeric ranges in the
entries for the Systems Manager Machines parameter.
The following example indicates that the last part of the IP address can take the value of a number between 4 and 6 inclusive.
[SYSTEM]
System_Manager=190.8.7.4-6
The previous example is a more convenient way of writing:
[SYSTEM]
System_Manager=190.8.7.6, 190.8.7.5, 190.8.7.4
You can also use wildcards, such as, in this example:
[SYSTEM]
System_Manager=190.8.7.*
The following directive grants access to all clients:
[SYSTEM]
System_Manager=*.*.*.*
However, it is not recommended that such a directive be used on operational systems.
10 CSP Gateway Configuration Guide