Vuforia Experience service OnPremises Implementation

[ppandarkar-2]

Hello All,

We are implementation vuforia ES On-premises so for that please can someone guide all its process, architecture diagram, Firewall rules (as on premise server to be host on internet - DMZ). If anyone implemented with firewall rule and DMZ network then please can you send its detail sequence and architecture diagram.

As a document, i got only installation/deployment pdf. So if is there any related documents, videos then please send its link to understand all concepts and then implement to avoid issues/problems in between implementation.

Regards,

Prashant Pandarkar

[sdidier]

Hello Prashant,

I didn't find any documentation and recommendation from PTC about that.

It is highly dependent of IT's security of each company.

To do a such installation, I will follow these steps :

1. Install ThingWorx in HTTP
2. Open port 8080
3. Install Vuforia Experience Service in HTTP
4. in Firewall, open port 2019 (by default) in the Vuforia Experience Service
5. Check if everything works as expected in local network
6. Setup ThingWorx with SSL and HTTPS
7. Open port 8443
8. Setup Vuforia Experience Service with SSL and HTTPS
9. Check if everything works as expected in local network
10. Setup Tomcat to be more secure as general recommendations described in for example in these links: https://geekflare.com/apache-tomcat-hardening-and-security-guide/ and https://www.upguard.com/articles/15-ways-to-secure-apache-tomcat-8
11. Setup domain URL for ThingWorx and Vuforia Experience Service
12. Setup firewall, router and proxy with your IT to expose them on internet
13. Check if everything works as expected in Internet network
14. Open a case at PTC to do GXI registration as described here https://www.ptc.com/en/support/article?n=CS265827
15. In Vuforia View, check if without Experience Service URL, Vuforia Experience Service can be reached

Best regards,

Samuel