Making the Web Client Visible to External Users

The steps to make the Cerberus HTTP/S Web Client live for customers outside your network are similar to making any website 'live' on the internet. The high-level steps are:

1. Ensure you have an active HTTPS listener in Cerberus. See Adding an HTTP or HTTPS Listener
2. On your firewall, create a port forwarding rule to forward port 443 (the default port) on your external IP address to the same port on your Cerberus server's internal IP address
3. On your firewall or router, add a DNS A record for a subdomain on your main domain for the Web Client, something like transfers.mydomain.com
4. To secure your web client site so that browsers do not mark it as not secure, if you don't already have one, purchase an SSL certificate from a recognized certificate authority (examples are GoDaddy, DigiCert, or Verisign, but there are many). You can create the Certificate Signing Request (CSR) right in Cerberus. See Creating a Certificate Signing Request
5. See Importing a 3rd Party Certificate for instructions on installing the certificate. Often you will have to install a separate certificate (sometimes referred to as an intermediate certificate, domain certificate, or bundle file) in the 'CA Certificate Path' field of 'Server Manager' > 'Security' > 'Server Key Pair', along with your main SSL certificate and private key.

If these steps were carried out correctly, your site will now be available on the internet for your users to log into and transfer files. For questions regarding the above, contact Cerberus Support at support@cerberusftp.com