Configuring your web server – PortSwigger

BUSINESS

In the upper right corner of the screen, select the settings icon and navigate to “Network” to open the network settings. If this is the first time you are logging in as an administrator, you need to set the URL of the web server.

From this page you can change the following settings. Note that if you change any of these settings, you will have to wait for the web server to restart, change the URL in your browser, and log back in.

Web server URL and port number

This is the URL through which users will access the web server and log into Burp Suite Enterprise Edition. This URL is also used to generate links in emails sent from the server, such as password reset emails.

The first time you log in as administrator, you need to change it to http://your-web-server-IP:8080 or the fully qualified domain name of the machine where you installed the web server. The port number is the one you specified during the installation process (default: 8080). You can change these settings later if necessary.

By default, the web server uses unencrypted HTTP for communication. If you plan to enable TLS, you must change the URL of the web server to use HTTPS.

Enabling TLS

If you want to enable TLS, select the “Use TLS” switch. You will then be asked to download a PKCS#12 certificate. This must have the .p12 file extension; certificates in .psx formats are not supported. You must also provide the password for the certificate file.

If you enable TLS after you have already set the web server URL, note that you must also change the web server URL to use HTTPS. That is, you need to update the URL to https://your-web-server-IP:8080.

Configuring an HTTP proxy server

The corporate server must access portswigger.net on port 443 activate your license and perform automatic software updates. For the best experience, we recommend that you allow this access throughout your continued use of the software, not just during the initial installation. If your organization does not allow you to connect directly to the public Internet, you can configure a network proxy that the corporate server can use to reach external domains, such as portswigger.net.

  1. Enter the hostname and port number of your proxy server, such as example.com:1234.

  2. If your proxy server requires a connection, enter a valid user name and password that the corporate server can use to connect to the proxy.

  3. If you also want to use the proxy server to connect to an SMTP server, enable this option as well. However, note that this option is only available if you are using an unauthenticated proxy. For more information, see the documentation on how to configure a connection to your SMTP server.


Source link

Leave a Reply

Your email address will not be published. Required fields are marked *