Proceed as follows to create a new endpoint in the icom Connectivity Suite - VPN. Optionally, you can also create a webproxy for the endpoint when creating it.
Click on the VPN → Endpoints (Webproxies) page on + ADD ENDPOINT.
From the networks of all INSYS routers registered with the icom Connectivity Suite - VPN, select the Device network that you wish to add as an endpoint.
Select the Protocol for accessing the endpoint.
Enter the IP address under IP in the VPN at which the endpoint can be reached in the VPN network.
Enter the Port used to access the endpoint. The port is already pre-assigned to the default port of the selected protocol.
Enter an Endpoint name that uniquely describes the endpoint so that it can be distinguished from others.
If you also want to create a webproxy for this endpoint, activate the Add webproxy switch and click NEXT to define it:
Optionally, change the randomly generated string in Name in URL to a ‘descriptive’ address. The resulting URL is displayed as a preview below the field..
For Basic Authentication, optionally select No Authentication if no password is required to access the device. This is necessary, for example, if a camera requires HTTP authentication, as two-step authentication is not possible in a browser session.
Security risk!
After deactivating authentication, the application in question can be accessed via the Internet without protection from the icom Connectivity Suite – VPN. Security can only be provided by the application itself. It is therefore essential to regularly check the application for security vulnerabilities. We do not recommend this function for security-critical applications.
Only change the Advanced webproxy settings if you want to configure them for specific use cases. We recommend using the default settings if you are not sure about the effects of any changes.
If the Enable WebSocket protocol in webproxy checkbox is selected, a WebSocket connection (ws: or wss:) between the VPN service and the application is enabled. For example, we recommend allowing a WebSocket connection if a webproxy is used to access INSYS routers with icom OS 5.5 or higher.
If the Cross-Origin Resource Sharing (CORS) checkbox is enabled, cross-origin resource sharing is permitted, i.e. the client may also send script requests to a server with a different domain, which is normally prohibited by the same-origin policy (SOP).
If the checkbox Endpoint uses additional independent authentication ("Form-based-Auth" only) is selected, form-based authentication can be performed on the target device in addition to authentication by the webproxy.
If the Accept encoding: without compression checkbox is selected, the transferred content will not be compressed further.
Click on CREATE to add the endpoint.
The endpoint is displayed in the list of endpoints on the Endpoints (Webproxies) page.