Forums (Obsolete)

Portal Engine Questions on portal engine and web parts.

Version 5.x > Portal Engine > block all outside access to cmsdesk

View modes:


Member	gatsby0121 - 5/11/2011 8:53:39 AM block all outside access to cmsdesk What's the best way to block all outside access to the cmsdesk?

Kentico Consulting

kentico_borisp - 5/12/2011 6:05:00 AM

RE:block all outside access to cmsdesk

Hello,

The easiest way would be to create a simple redirect in the Global.asax.cs file in the method Application_BeginRequest where you would filter out and redirect ip addresses which aren't inside your company network. Or you can disable the CMSDesk entirely and manage the content only through content staging with the CMSDisableAdministrationInterface settings key in the web.config.

Best regards,
Boris Pocatko

Member

huber-soapcreative - 4/19/2012 2:29:42 AM

RE:block all outside access to cmsdesk

Bumping a pretty old post... here's how I'm going about it in version 6, without writing any custom code.

In web.config, I changed the following key:


<forms loginUrl="CMSPages/logon.aspx" defaultUrl="Default.aspx" name=".ASPXFORMSAUTH" timeout="60000" slidingExpiration="true" />

to:


<forms loginUrl="CMSPages/admin/logon.aspx" defaultUrl="Default.aspx" name=".ASPXFORMSAUTH" timeout="60000" slidingExpiration="true" />

So, I'm re-routing the login page to a specific directory. Now, in the CMSPages directory, create a directory named "admin", and move logon.aspx and logon.aspx.cs inside it. Edit logon.aspx, and modify the following line:


<%@ Register Src="../CMSAdminControls/UI/System/RequireScript.ascx" TagName="RequireScript" TagPrefix="cms" %>

to:


<%@ Register Src="../../CMSAdminControls/UI/System/RequireScript.ascx" TagName="RequireScript" TagPrefix="cms" %>

Next, within kentico, modify the login page as shown here: http://devnet.kentico.com/Forums.aspx?forumid=45&threadid=25974. This step may be optional as I think this may be only for secured pages within your website, but I've done it anyway.

Finally, within IIS, add an IP based restriction to the CMSPages/admin folder.
http://support.microsoft.com/kb/324066/en-us

Kentico Admins - any thoughts?

Kentico Developer

kentico_helenag - 4/23/2012 2:07:14 AM

RE:block all outside access to cmsdesk

Hello,

Yes, this approach is correct.

Regarding the mentioned forum thread:

The setting in Site manager relates to the setting in:

CMSDesk -> Content -> document Properties -> Security

The visitor is redirected to the logon page from Site manager setting, when he tries to access a document configured as secured in CMSDesk.

The logon page defined in web.config (<forms...) is the general ASP.NET setting. You are redirected to this page when you try to access CMSDesk or Site manager.

Best regards,
Helena Grulichova

Top