KB Article #153601
Redirect FTD Admin UI to port 80
By default, FTD 2.0.1 uses port 8090 for its Admin UI i.e. - http://ftdirect.server.com:8090/webtop/application
Sometimes, this port is not open in the corporate network and special and/or time consuming change requests should be completed in order to make port 8090 available on firewall level.
The approach below would save time and efforts for opening port 8090 on firewall level.
Resolution
1. Open SSH session (e.g. with putty) to FTD 2.0.1
2. Edit file
/usr/platform/etc/haproxy.cfg
so that it resembles the file listed below (NOTE: Please change "ftdirect" hostname below to FTD server's hostname in question)
global
daemon
nbproc 4
defaults
clitimeout 60000
srvtimeout 30000
contimeout 4000
listen lb ftdirect:80
mode http
balance roundrobin # Load Balancing algorithm
option httpclose
## Define your servers to balance
server ftdirect-host1 ftdirect:8090 check
server ftdirect-host2 ftdirect:8091 check
server ftdirect-host3 ftdirect:8092 check
server ftdirect-host4 ftdirect:8093 check
server ftdirect-host5 ftdirect:8094 check
3. You can edit this file from FTD console menu by executing the script below:
/usr/lib/appliance/www/scripts/console-menu.sh
3.1. Press C for FTDirect Configuration
3.2. Press P for HAProxy Configuration
3.3. Press M for Modify/View Configuration
3.4. Edit the file and save it using the commands from the help screen
4. Press E to Enable HAProxy Server
5. Press S to Start HAProxy Server
You should now be able to connect to the FTD server's Admin UI on port 80 i.e. - http://ftdirect.server.com/webtop/application