# Remote SSL access using just one TCP port

**URL:** <https://forum.inductiveautomation.com/t/remote-ssl-access-using-just-one-tcp-port/19339>\
**Category:** Ignition\
**Created:** [August 21, 2018, 12:26pm UTC](https://forum.inductiveautomation.com/t/remote-ssl-access-using-just-one-tcp-port/19339 "2018-08-21T12:26:14Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![javier.arena1](https://avatars.discourse-cdn.com/v4/letter/j/258eb7/32.png) [@javier.arena1](https://forum.inductiveautomation.com/u/javier.arena1)\
**Post date:** [August 21, 2018, 12:26pm UTC](https://forum.inductiveautomation.com/t/remote-ssl-access-using-just-one-tcp-port/19339/1 "2018-08-21T12:26:14Z")

</div>

We set up a rule in the firewall to redirect external port 8043 to port 8043 on the VM where Ignition resides. Web access to https://:8043 works fine.  
But, when we try to open a designer instance from there, it throws a connection error. Looking into the jnlp, it looks like it’s also trying to connect to \<public\_IP\>:8088. If we set up a temporary rule to forward external port 8088 to port 8088 on the VM, it works fine, but that is something we cannot maintain, because we’re not allowed to open non-secure ports to the Internet.  
This looks like a very bad design, that the standard port (8088) is hardcoded in the jnlp.

Is there any way to connect a remote designer using just a single TCP port redirection through a firewall?

Thanks,  
Javi

---

<div class="post-metadata">

**Author:** ![pturmel](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/pturmel/32/3295_2.png) [@pturmel](https://forum.inductiveautomation.com/u/pturmel)\
**Post date:** [August 21, 2018, 12:36pm UTC](https://forum.inductiveautomation.com/t/remote-ssl-access-using-just-one-tcp-port/19339/2 "2018-08-21T12:36:19Z")

</div>

No, though this has been reported to be fixed in the upcoming Ignition v8.0.

---

<div class="post-metadata">

**Author:** ![paul-griffith](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/paul-griffith/32/37249_2.png) [@paul-griffith](https://forum.inductiveautomation.com/u/paul-griffith)\
**Post date:** [August 21, 2018, 3:12pm UTC](https://forum.inductiveautomation.com/t/remote-ssl-access-using-just-one-tcp-port/19339/3 "2018-08-21T15:12:04Z")

</div>

> [@Ignition Port Usage](http://forum.inductiveautomation.com/t/ignition-port-usage/19208/2):
>
> This is not possible in 7.9, unfortunately - some resources are always downloaded over the HTTP port during vision client launch. This is going to change in 8.0, however.