Running the License Server on the Internet

[PaulCahill]

I noticed there doesn't seem to be any kind of authentication between the Agent and the License Manager (That I could find). Most of our QA team is off-site and the License Manager is in-house. Is there any danger to having the License Manager's port listening on our public IP? Most people in our QA group don't qualify for VPN access into the corporate network.

[mayo]

While this is possible, opening ports does open you up to more vulnerabilities. I would reach out to your account manager regarding splitting license keys so that you can run two separate license managers within each team's network.

[ahoisl]

I would highly recommend against running the Ranorex License Manager on a public network. As you said, it does not have any user management, so everyone could use your license (which is probably not what you want and also violates the EULA).
Additionally, the license manager was not designed to run on a public port and could be vulnerable to security breaches.

Please, as Mayo said, run separate license managers on internal networks or use a separate VPN to connect to the license manager. You can have different VPNs running at the same time in different security zones...

Regards,
Alex
Ranorex Team

[PaulCahill]

Thanks everyone, that was my gut feeling. At the very least, they could use https://auth.ranorex.com/license/ correct?

[ahoisl]

Thanks everyone, that was my gut feeling. At the very least, they could use https://auth.ranorex.com/license/ correct?

Sure, to authenticate the licenses and then install them without Internet connection.

Regards,
Alex
Ranorex Team