Ports For Remote access

[khalil]

Hello.
What are the ports that should be opened in order to access the SL,HL, LM remotely?
and what is the safest way for remote web access?
BR,

[Daniel]

Use Zerotier for LM. Opening port is not safe.
https://openrb.com/zerotier-remote-maintenance-of-lm5/

[khalil]

Use Zerotier for LM. Opening port is not safe.
https://openrb.com/zerotier-remote-maintenance-of-lm5/

Thanks Danial 
Even If I only open https port, still not secure?
BR,

[Daniel]

HTTPS is secure only if you have valid SSL certificate, otherwise is more or less same as HTTP.

[khalil]

HTTPS is secure only if you have valid SSL certificate, otherwise is more or less same as HTTP.

Thank you Danial

[Erwin van der Zwart]

Please correct me if i'm wrong, but a SSL certificate does not protect you, it just tells you that the source can be trusted. Yes HTTPS has the advantage that your username and password are encrypted during logon, if using HTTP this information could be fetched from the traffic packages so you should not use this for secure logon.

The question is more, do you want everyone to be able to access your controller and use authentication as your "door" or do you want to keep it seperated from the public internet so only authorized users can access it at all.

If you use port forwarding then you are exposed to the public internet and when using VPN you must establish a connection to the VPN before you can reach it at all. In my opinion VPN is the only secure way to solve this question...

[Daniel]

When https is used then yes data is encrypted but without proper certificate you are still vulnerable for man in the middle attack and the data can be decrypted.