KB Article #153601

Redirect FTD Admin UI to port 80

Problem

By default, FTD 2.0.1 uses port 8090 for its Admin UI i.e. - http://ftdirect.server.com:8090/webtop/application



Sometimes, this port is not open in the corporate network and special and/or time consuming change requests should be completed in order to make port 8090 available on firewall level.



The approach below would save time and efforts for opening port 8090 on firewall level.


Resolution

1. Open SSH session (e.g. with putty) to FTD 2.0.1
2. Edit file



/usr/platform/etc/haproxy.cfg



so that it resembles the file listed below (NOTE:   Please change "ftdirect" hostname below to FTD server's hostname in question)



global
       daemon
       nbproc 4



defaults
    clitimeout  60000
    srvtimeout  30000
    contimeout  4000



listen  lb ftdirect:80
    mode http
       balance roundrobin # Load Balancing algorithm
       option httpclose
       ## Define your servers to balance
       server ftdirect-host1 ftdirect:8090 check
       server ftdirect-host2 ftdirect:8091 check
       server ftdirect-host3 ftdirect:8092 check
       server ftdirect-host4 ftdirect:8093 check
       server ftdirect-host5 ftdirect:8094 check



3. You can edit this file from FTD console menu by executing the script below:



/usr/lib/appliance/www/scripts/console-menu.sh



  3.1. Press C for FTDirect Configuration
  3.2. Press P for HAProxy Configuration
  3.3. Press M for Modify/View Configuration
  3.4. Edit the file and save it using the commands from the help screen



4. Press E to Enable HAProxy Server
5. Press S to Start HAProxy Server



You should now be able to connect to the FTD server's Admin UI on port 80 i.e. - http://ftdirect.server.com/webtop/application