Product description
Order No. 2089 00
Page 8
2.4.1. HTTPS proxy httpaccess.net
Most network devices today, such as cameras or network printers, have an integrated web server for
access with a web browser. Access via the Gira Device portal is especially easy in such cases. Each
network device that can be accessed via a Gira S1 automatically receives its own name under the
domain httpaccess.net. Using this name, you can access the corresponding network device from any
-
where using a web browser.
All communication via the Internet is also encrypted, and user authentication occurs according to the
access authorisation set on the Gira Device portal for the Gira S1.
To save you from having to remember links, the Gira Device portal manages a list of links of the end
devices, which you can access at httpaccess.net. If the network device supports UPnP, the Gira Device
portal can enter it automatically in the list of links. You can also enter devices in the list manually if
they are not added automatically.
2.4.2. Communication – Secure, reliable and easy to handle
For communication with the portal server, the Gira S1 uses the standard protocols HTTPS, TLS/SSL
and WebSockets. All data is encrypted using AES.
Gira S1 and the Gira Device portal authenticate each other with digital certificates and RSA key pairs.
The certificates are issued by our own certification office.
Through the use of standard protocols and because the Gira S1 actively connects to the Gira Device
portal, we achieve the best possible compatibility with the existing infrastructure. For your Internet
router, the Gira S1 communication is no different from the encrypted connection of your web browser,
e.g. for online banking or Google searches.
The advantage for you is that the Gira S1 works without requiring any complex configuration. This is
a major advantage compared to other approaches to secure remote access, such as VPN or SSH tun
-
nelling.
In contrast to other solutions, remote access even works via a mobile phone or IPv6 connection, even
if it doesn't have a unique IP address that can be accessed externally.
2.4.3. Gira S1 notifications
KNX group objects and system events such as the logging in/logging out of a Gira S1 to/from the
portal can be used to generate notifications in the portal server. In addition to static texts, they may
also contain values from the KNX or even an attachment, such as a camera image.
These notifications can be configured for forwarding via e-mail, phone or text message. Send KNX
status messages by text message or voice call via the chargeable, additional service sms77 or Mes
-
sageBird.
2.5. Client software (Gira S1 Windows client)
You install the Gira S1 Windows client on a Windows computer. Through the Gira S1 Windows client,
other applications running on your computer are given access to your devices without having to sup
-
port the remote access function themselves.
The Gira S1 Windows client establishes an encrypted connection to the Gira S1 via the Gira Device
portal. This connection is made available to other applications on your computer and on your local
network so that they can access devices on the remote network. Examples:
• You can configure KNX devices via KNXnet/IP using the ETS.
• You can configure a HomeServer using the Gira HomeServer Expert.
• You can access a Windows computer using a remote desktop connection.
• Using SSH and/or X Windows, you can access a Linux computer or embedded Linux devices.
• Many other use cases are supported via freely configurable TCP port forwarding.
