English

How To: Configure a forward proxy server with Portal for ArcGIS 10.2.2

Summary

A forward proxy server is a computer on a LAN that allows connections outside the network without compromising the security of the internal network. Use of a forward proxy server is very common in perimeter networks (also known as demilitarized zones (DMZ), or screened subnets) to protect the identity of internal machines.

Portal for ArcGIS 10.2.2 may require connection outside the network if external services are used in Portal for operations such as batch geocoding, printing, or feature service editing. If the organization uses a forward proxy server that requires an explicit configuration, it is necessary to configure Portal for ArcGIS 10.2.2 to use a forward proxy server. The steps below describe how to provide adequate information about the forward proxy server to the portal.

Note:
Forward proxy servers that require authentication are not supported for use with Portal for ArcGIS 10.2.2.

Procedure

Note:
This article is for Portal for ArcGIS 10.2.2 only. Prior to 10.2.2, the forward proxy settings are not honored when consuming items that have saved credentials for external services. There may be a problem viewing the service in the Portal's map viewer or configuring it as a utility service.

This article does not apply to Portal for ArcGIS 10.3 and later, as the forward/reverse proxy configuration requirement is now supported through the Portal Administrator Directory.
  1. Stop Portal for ArcGIS 10.2.2.
  2. On the machine hosting Portal for ArcGIS 10.2.2, navigate to the following folder:
    <Portal for ArcGIS installation location>\Portal\framework\runtime\tomcat\conf
  3. Open the catalina.properties file in a text editor and add the following properties at the end of the file to specify the host and port values that correspond to the organization’s proxy server.
    http.proxyHost=ProxyHostName.domain.com
    http.proxyPort=ProxyPort
    https.proxyHost=ProxyHostName.domain.com
    https.proxyPort=ProxyPort
  4. Optionally, add the following properties to the end of the file to configure the portal to exclude specific hosts from using the proxy server:
    http.nonProxyHosts=localhost|myportal.domain.com|*.domain.com
    https.nonProxyHosts=localhost|myportal.domain.com|*.domain.com
  5. Start Portal for ArcGIS 10.2.2.
    Note:
    When upgrading the software to a new release, these forward proxy settings are lost. Reapplying these settings is necessary after upgrading the software.

Related Information