How to configure jmx-console.war only can be accessed in internal network

[andy215]

I met a problem in my project:

Our app.war deployed in jboss container, this war can be accessed by external network, it's for all the users. There is a jmx-console.war in Jboss's deploy directory, so this war is also be accessed by external users.

There is a request from customer: Only internal users can access the jmx-console, even though everyone who want to access the jmx-console should have a account/password.

Is there anybody can give some good suggestions?

Thanks in advance!

[wdfink]

You might remove the jmx-console, otherwise the only way is to secure it with a login. Maybe a Apache in a DMZ can filter the URL and allow only URLs different from ..../jmx-console to reach the server at x.x.x.x:8080.

In this case the server is not direct accessable from outside.

In AS7 the management can be bound to a different interface, also it listen at 9990 instead of the 'normal' application port 8080.