Setting up the Proxy server

In order to use Velocity Forms with Ivanti Neurons, install a Proxy server on your network that allows secure communication between Ivanti Neurons in the cloud and the devices on your network. Install the Proxy server in a location that allows connections from the devices and to the internet.

The Proxy server authenticates to Neurons using an app registration. Create the app registration in Ivanti Neurons and copy the information. Then install the Proxy server and provide the app registration details. You must have the Modify App Registrations permission in Ivanti Neurons in order to create and approve the app registration.

The Proxy server creates self-signed certificates when it is installed. The certificates are used to secure and authenticate connections from the Velocity Clients, so you need to distribute the certificates to any Velocity devices that are going to use forms.

The Clients also must have the address and port for the Proxy server. After you set up the Proxy server, use the Velocity Console to configure the Velocity Client to use the Proxy server address.

This topic covers creating the app registration, installing and configuring the Proxy server, and connecting the Proxy server to Neurons. For additional information about distributing the certificates and configuring devices, see Distributing certificates and Configuring the Velocity Client.

Prerequisites and network information

The Proxy server should be installed on a system that meets the following minimum requirements: 

•Windows 10 or newer

-or-

Windows Server 2012 R2, 2016, 2019, or 2022

•200 MB disk space

•Access to the internet

•Access to the network the devices are on

You must be logged in to the computer on an account with administrative privileges to run the installer.

The server where the proxy is installed should have a stable IP address to ensure that devices and certificates only need to be distributed once. The Proxy server uses the following TCP ports by default: 

•5555: The Proxy server listens on this port for connections from devices. By default, the installer creates a rule in the Windows firewall that allows inbound connections on this port, but if you have other firewall or security measures in place, you must allow inbound connections on this port.

•14573: The Proxy server UI is accessed on this port. Since an administrator can only access the UI from the local computer, it does not need to be configured in the firewall. The Proxy server does not allow access to the UI from remote computers.

1.In Ivanti Neurons, navigate to Admin > App Registrations.

2.Select New registration to open the New app registration panel.

3.From the drop-down, select Velocity Forms and select Continue.

4.If desired, provide a description for the app registration and select Register.

5.Copy the registration information to a secure location, or directly into the Proxy server UI. Do not close the panel until you have copied the information.

The Proxy server should be installed in a location where devices can reach it and it can reach the internet.

1.In Ivanti Neurons, navigate to Supply Chain Intelligence > Proxy server download.

2.Select Download Proxy server.

3.If needed, copy the installer to the computer where you want to install the Proxy server.

4.Double-click the file to run the installer. The Welcome screen appears.

5.Select Next. The End User License Agreement appears. Read the agreement and select I accept the terms in the License Agreement to agree.

6.Select Next. The Ready to Install screen appears.

7.Select Install to install the Proxy server. You may see a User Account Control dialog that requests permissions for the installer. You must accept the request to install.

8.Make sure the Launch configuration page option is enabled and select Finish.

The first time you access the Ivanti Neurons Proxy server UI, you must set up an account. The account is only for this Proxy server, and can only be used from the local computer. You cannot access the Proxy UI from another computer through a browser.

1.When you have the Launch configuration page option enabled at the end of the Proxy server installation, the Create account page loads in a browser as soon as you close the installer. Otherwise, you can open the Proxy server UI in a browser by typing in the address bar: 

https://127.0.0.1:14573

2.Provide a username and password to secure the Proxy server configuration and select Create account.

The Device information page loads.

If you want to change the username or password after the initial configuration, select the user account icon in the top right corner of the Proxy server UI and select Proxy account.

In order for the Proxy server to communicate with Ivanti Neurons, the Proxy server must request an access token and an Ivanti Neurons user must approve the Proxy server. You must create an app registration in Ivanti Neurons before you can connect a Proxy server.

1.In the Proxy server UI, navigate to the Ivanti Neurons connection page.

2.Paste the registration information that you copied from the app registration into the appropriate fields.

3.Select Approve in Ivanti Neurons.

4.If you are not currently logged in to Ivanti Neurons, the Ivanti Neurons Log in page appears in another browser window. Provide your Ivanti Neurons credentials and select Sign in.

5.The Approval page appears. Select Yes, Allow.

6.In the Proxy server UI, the Ivanti Neurons connection page shows the token status and expiration date.

Once you have approved the Proxy server, it has an access token that allows connections for 1 year. An administrator must refresh the access token before the token expires in order to keep forms available. If the token expires, Velocity Clients will not be able to access forms.

If you refresh the token before it expires, the process can be done entirely from the Proxy server UI. If the token has expired, you must create a new app registration in Ivanti Neurons and replace the registration information in the Proxy server UI.

For an active token:

1.In the Proxy server UI, navigate to the Ivanti Neurons connection page.

2.Select the Refresh the token button.

For an expired token: 

1.Create a new app registration in Ivanti Neurons.

2.In the Proxy server UI, navigate to the Ivanti Neurons connection page.

3.Paste the registration information that you copied from the app registration into the appropriate fields.

4.Select Approve in Ivanti Neurons.

5.If you are not currently logged in to Ivanti Neurons, the Ivanti Neurons Log in page appears in another browser window. Provide your Ivanti Neurons credentials and select Sign in.

6.The Approval page appears. Select Yes, Allow.

7.In the Proxy server UI, the Ivanti Neurons connection page shows the token status and expiration date.