# Publish Project on the Web

**URL:** <https://forum.inductiveautomation.com/t/publish-project-on-the-web/6297>\
**Category:** Ignition\
**Created:** [April 22, 2013, 4:35pm UTC](https://forum.inductiveautomation.com/t/publish-project-on-the-web/6297 "2013-04-22T16:35:47Z")\
**Posts on this page:** 6\
**Page:** 1

<div class="post-metadata">

**Author:** ![JoseMaPerez](https://avatars.discourse-cdn.com/v4/letter/j/8baadc/32.png) [@JoseMaPerez](https://forum.inductiveautomation.com/u/JoseMaPerez)\
**Post date:** [April 22, 2013, 4:35pm UTC](https://forum.inductiveautomation.com/t/publish-project-on-the-web/6297/1 "2013-04-22T16:35:47Z")

</div>

Hello,

We have several projects that we can access through our company network, but there is one client that does not have access to our network. Is there a way to make the project “public” so that our client can access it through the internet from anywhere?

I don’t know if this it something that can be done with Ignition or if it’s through something else. Honestly, when it comes to networking I always feel pretty lost, so sorry if I seem “ignorant”. 😊

Thanks in advance!

Jose

---

<div class="post-metadata">

**Author:** ![Kevin.Herron](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/kevin.herron/32/7259_2.png) [@Kevin.Herron](https://forum.inductiveautomation.com/u/Kevin.Herron)\
**Post date:** [April 22, 2013, 4:40pm UTC](https://forum.inductiveautomation.com/t/publish-project-on-the-web/6297/2 "2013-04-22T16:40:14Z")

</div>

It’s certainly possible, but it’s just going to come down to working with IT because it’s just an issue of setting up your network correctly.

That being said… don’t turn yourself into another automation security news story. Have the client use VPN to access the project if you can.

---

<div class="post-metadata">

**Author:** ![Pat](https://avatars.discourse-cdn.com/v4/letter/p/8491ac/32.png) [@Pat](https://forum.inductiveautomation.com/u/Pat)\
**Post date:** [April 22, 2013, 5:21pm UTC](https://forum.inductiveautomation.com/t/publish-project-on-the-web/6297/3 "2013-04-22T17:21:18Z")

</div>

> [@Kevin.Herron](#):
>
> That being said... don't turn yourself into another automation security news story. Have the client use VPN to access the project if you can.

Doesn't accessing the project over HTTPS provide adequate security?

I've always been under the impression that if a VPN account was compromised, the intruder would have access to the entire network, but if a project communicating over HTTPS was compromised, the intruder would only have access to an Ignition project?

---

<div class="post-metadata">

**Author:** ![Kevin.Herron](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/kevin.herron/32/7259_2.png) [@Kevin.Herron](https://forum.inductiveautomation.com/u/Kevin.Herron)\
**Post date:** [April 22, 2013, 5:25pm UTC](https://forum.inductiveautomation.com/t/publish-project-on-the-web/6297/4 "2013-04-22T17:25:16Z")

</div>

I guess it depends what your definition of adequate is. HTTPS is certainly secure enough, but the idea of a SCADA system being remotely accessible doesn’t sit well with me 😛

And yes, what you say about VPN is true I guess (not really sure about all the ways you can configure a VPN account to limit accessibility to the network once signed in…), but it doesn’t seem to prevent practically every company from having VPN access set up to their networks, whatever that’s worth.

---

<div class="post-metadata">

**Author:** ![JoseMaPerez](https://avatars.discourse-cdn.com/v4/letter/j/8baadc/32.png) [@JoseMaPerez](https://forum.inductiveautomation.com/u/JoseMaPerez)\
**Post date:** [April 22, 2013, 5:59pm UTC](https://forum.inductiveautomation.com/t/publish-project-on-the-web/6297/5 "2013-04-22T17:59:35Z")

</div>

OK.

I think I understand what I need to do.

Thanks for the help. I really appreciate it.

Jose

---

<div class="post-metadata">

**Author:** ![Dravik](https://avatars.discourse-cdn.com/v4/letter/d/e274bd/32.png) [@Dravik](https://forum.inductiveautomation.com/u/Dravik)\
**Post date:** [April 22, 2013, 7:35pm UTC](https://forum.inductiveautomation.com/t/publish-project-on-the-web/6297/6 "2013-04-22T19:35:37Z")

</div>

VPN concentrators should be firewalled from the corp network. Often VPN accounts are put into different ‘access’ groups and limited in what they can do.

No security is perfect!
