iOS Splunk MobileApp - what TCP port(s) (or other) need to be allowed through my VPN

[MBenz123]

Trying to get Splunk Mobile App to work via VPN on iPad. I have to open needed TCP/IP communications via VPN first. I haven't been able to find any related documentation.

[rgantly_splunk]

In the documentation we only described how to connect the the Splunk Mobile Server in the DMZ, so that the users don’t have to connect using VPN.

You do not need to configure any special settings to connect via VPN to the Mobile Access Server from the Splunk Mobile App. Install and configure the Splunk Mobile Access server as described in the docs.

If the mobile server runs on an internal IP address, for example, https://10.0.1.109, then:
1. Connect to your network with your VPN client.
2. When you are logged on your network, in the Splunk Mobile App host field, enter 10.0.1.109. You don't need to enter the port number if the default (443) was used during installation.

[esix_splunk]

The app will connect via https TCP/443 to the mobile server. Then that server needs connectivity back to the splunk related servers. The server only uses read only REST calls, and you can define which port it uses for connectivity.

You can find the official documentation at:

Splunk Mobile Documentation

To secure the server from unwarranted attacks:

Configure the firewall to only allow inbound HTTPS connections. For example, if the mobile server runs on https://, then configure the firewall to only accept HTTPS request from the internet to access the mobile server on port 443 (the default port used by secure http).