#Web Gateway

Hello,

I need to expose InterSystems HealthInsight dashboards over the internet to external operators. The authentication flow is managed externally. When a user is authenticated, our system receives an HTTP request with specific headers (e.g., operator’s fiscal code and hospital identifier) that we need to extract in order to:

• Authorize the user to access the dashboards.
• Apply row-level security on the dashboards, filtering the data by hospital and user role.

Hello Community,

When handling a %CSP.REST API response for a custom endpoint, how can I capture or access the response content before it is written to the output buffer and sent through the Web Gateway to the UI?

In manually created REST services (for example, with a route like:<Route Url="/test" Method="POST" Call="User.Sample:Test" Cors="true"/> ),
the response is typically written from within any class method in the execution flow.

Is there a way to intercept or log the response content before it is sent to the client?

Thanks!

I have created a new docker stack with webgateway and IRIS for Health 2025.1. I have mapped the posts of wegateway like this:

• 8743:443
• 8780:80

I can access IRIS portal through 8743 without problems.

I also have created a FHIR repository, and I'm able to access it through 8743 port.

I have a web application, in another server with another domain, that connects to this FHIR repository. I have configured in FHIR endpoint the allowed origin to the domain of this application.

I'm not so experienced in administering IRIS but as far as I understand IRIS for Health community comes with a web server out-of-the-box while licensed editions require Web Gateway to be deployed.

I was able to install dockerized instances of IRIS for Health 2025.1 along with Web Gateway, double checked that _SYSTEM and CSPSystem users are not locked, changed passwords for both, configured the gateway to connect to IRIS, then created a web gateway app (/iris) and checked the connection is OK. Now I'm struggling with accessing Management Portal.

I currently have an issue with a failed connection in VSCode and need some help.

It doesn't work when using ports 80, 1972, and 7038.

We have a machine that serves 4 instances of Cache on VMS systems, one of them is password protected and works fine as they all do. we decided we wanted something beefier and copied it to a server, well all but the one you have to login to works so 3 of the 4 do.  and the odd part is I can no longer get to the management page from anywhere on any machine, http://localhost/csp/bin/Systems/Module.cxw  I get a 404.8 error, I have tried adjusting security and same thing. and a server availability error.

I think it something on the new machine/server that is missing but why only 1 of the 4.

I am using an Apache webserver on RH8, which is working fine. However, I get the following message:

Directory /opt/webgateway/conf/temp/ does not exist or has incorrect permissions. This will limit the Web Gateway's functionality.

The folder is indeed missing, but in what way is it limiting functionality?

I just restarted an AWS instance that have been dormant for 6 months (license still valid) only to find that the web application on there doesn't work and that I cannot connect to the management portal. I can however connect to the web gateway fine but it reports the "Server is currently unavailable". 

Grateful any for any advice.

Fred Gustafsson

Well, now we got noPWS container with IRIS, and how to connect to it, simply, without any durable sys or files, using normal peoples way like Environment variables?

version: "3"
services:
  iris:
    image: containers.intersystems.com/intersystems/iris:2023.2.0.227.0
    ports:
      - 1972:1972
    volumes:
      - ~/iris.key:/usr/irissys/mgr/iris.key
  web:
    image: containers.intersystems.com/intersystems/webgateway:2023.2.0.227.0
    ports:
      - 52773:80

we've set up a new RHEL server 7.9  

I was able to get the portal to work partially from running this command

[root@facsp1 DSA200]# firewall-cmd --zone=public --add-port=57772/tcp --permanent
success

though as I said it was partial. any idea where else I need to change to make this work?

thanks

Paul

Can InterSystems IRIS Data Platform 2019  be Integrated with Snowflake?

From InterSystems Do we have any predefined packages or Adapters available to Connect with Snowflake?

Can InterSystems  be Connected with Snowflake through Web Gateway Management?

HI,

I'm migration an existing integration to InterSystems.  The upstream (external) system calls a JSON web service hosted in the interface engine, which converts the JSON data received to a HL-7 messages to send to the downstream system. I'm looking for direction and example of how to do the equivalent in InterSystems, so the the upstream system only has to modify the URL of the web service they call.

I suppose in IS we'll need to create a business service that is a RESTful JSON web service? How to access the JSON data (parameters in the web service call) in the Transformation?

Thank you!

W

After upgrading we had 2 major problems with the new version:

- Resending messages adds blank lines.
Because we have many HL7 processes, we regulary have to resend messages if there is an outage of a server we connect with.

- IIS recycling causes webgateway connection problems, after change from PWS to IIS.
At unexpected times a connection can no longer be made.
The strange thing is that it does not occur with every recycle of the application pool.
Setting the password again in csp.ini usually works, but not always, which is of course a major problem.

We are experimenting with IIS, as the PWS will be gone in newer versions.

The code which is executed, takes 15ms to run. If we execute it through PWS (REST), there is some overhead and the total execution time is 40ms, which is acceptable. However, if we go through IIS, it takes 150ms or sometimes even more.

Both PWS and IIS are running on the same server as IRIS in this case. No optimisations have been done on IIS.

Any suggestions on where to look/what to optimize on IIS?

Hi

I've installed Ensemble 2018 then enabled IIS from Win features, then realized that CSPGateway doesn't exit so I downloaded and installed CSPGateway-2018 from WRC.

so now I'm trying to set up a Website application and facing some issues, and I think IIS and CSPGateway in inetpub are not connecting or synchronising properly but mostly is accessing Web gateway via IIS my understanding is that I can access using the following url http://machinename/csp/bin/Systems/Module.cxw  using my machinename or IP but it's not happening.

I am using the event logger from CSP gateway with level "v9r" enabled, in order to dump the raw content of some HTTP requests.

I would like to decode the body response data, when it's in binary form. AFAIK the event logger will convert characters outside the 32-127 range (EBCDIC) to the "\xff" notation (where ff is a hexadecimal value). Here is an example :

Hi All,

Been trying to setup a iris 4 health community version along with a webgateway bothing utilizing docker. The documentation seems a little sparse when it comes to configuring each of these to work together, especially when it comes to utilizing the Webgateway to front end the MGMT pages for Irirs 4 Health.

I know there is a github repo that has a docker compose file, but that doesn't see to provide a light on what needs to be configured in order for it to work.

Web Server Type: Microsoft Web Server: Microsoft-IIS/10.0 .

Error from Gateway  - IRISCONNECT : Error Writing to InterSystems IRIS
Cannot Write Data : IRISconnectSend(): 0 Error Code: 0 (IRISconnectErrorString="SSL/TLS error in SSL_write(), SSL_ERROR_SYSCALL: I/O error (10053)")
lencoded
Accept: text/html,application/xhtml+xml,application/xml;q=0.

Error from HOST System to CSP Gateway : 403 Forbidden Error.

Error from IIS Logs : 403 16

What could be the Root Cause and Resolutions ??

Hi Community,

I am configuring new SSL Configuration for Gmail (For sending errors to gmail in ensemble production) by following the below steps.

Step1:

Step2:Giving the server address smtp.gmail.com

Step3:Giving the port number , I have tried giving 465,587,25 as port number still is not connecting 

Can anyone please tell me where i am doing wrong on configuration?

Thanks,

Saroja.A

Hi

I'm trying to configure IIS for csp

After following the steps here

Configuring IIS to Work With the Web Gateway (Windows) | Web Gateway Guide | InterSystems IRIS Data Platform 2022.1
 

I get this on accesing a csp page

Web Gateway Version 2022.1.0.209.0

Systems Management
Invalid Request : Cannot identify application path

I've disabled TLS v1.0 and 1.1 within Healthshare setting, but still seeing these error messages when running a security scan. We do have apache being used. What else can I try?

Error messages:

I have a .woff2 file I'm trying to serve over CSP.

If I set:
^%SYS("CSP","DefaultFileCharset")="UTF8"

Then it "just works" - but I'd rather not do something so heavy-handed/instance-wide, on principle. (This is for something that will ultimately be published on the Open Exchange.)

A more granular option, it seems, is described in the %CSP.StreamServer class reference:

if you need to define settings per extension (in uppercase) you can use ^%SYS("CSP","MimeFileClassify",$zcvt(ext,"U"))=$listbuild(type,bin,charset) where:

1. type - Content Type value, e.g.

After what is seemed was weeks, I finally got SSL/TLS enabled on both Apache Web Server and IRIS using the Web Gateway. However while we can now use HTTPS to connect to our Development instance of IRIS, I am running into several errors when I have others try to access the Management Portal via HTTPS.

We are seeing...

• "Unexpected status code, unable to process Hyper Event: Internal Server Error (500)"
• Server Unavailable

I am not sure if this is the correct place for this question, but I am struggling to setup TLS security for our IRIS Management Portal and etc. through Apache and the Web Gateway. I have a couple of questions when it comes to the setup.  

• if I build a private key and certificate within Red Hat, does that certificate have to be on everyone's pc to connect to the Management Portal?
• Can I use a self signed Certificate?
• Can I use the existing CA on the server, or do I need to work with my Data Security team to get a Certificate?

Any help would be appreciated

Thanks

Scott Roth

Running HealthConnect 2021.1 on RedHat Linux 8.4.

I've configured IRIS/HealthConnect with an external web server to support TLS encryption. It's installed on the same server as IRIS, but is a different instance and version of Apache httpd. That all works as expected.

I would also like to keep the "private" web server available, but I'm having an issue with using the fully-qualified domain name in the URL vs. just the hostname itself.

If I use http://servername:52773/csp/sys/UtilHome.csp to log on, all is well.

If I use http://servername.domain.name.tld:52773/csp/sys/UtilHome.

Hi

How to install the WebGateway package without interactive mode ?

I need to install this package in apache container

I want to try SAM in AWS. I followed these steps:

docker pull store/intersystems/sam:1.0.0.115

git clone intersystems-community/sam: System Alerting and Monitoring (SAM) (github.com)

git clone https://github.com/intersystems-community/sam

tar zpxvf sam-<version>.tar.gz

tar zpxvf sam-1.0.0.115-unix.tar.gz

$ cd sam-<version>

cd /home/ec2-user/git/sam/sam-1.0.0.115-unix/

$ ./start.sh

In your browser, visit:
http://<ip-address-of-host-where-SAM-runs>:8080/api/sam/app/index.csp
You'll be prompted to login. You can use standard InterSystems IRIS credentials like _SYSTEM/SYS.

Hi All,

I hope someone can help me with the following, it's about the usage of the class EnsLib.HL7.Service.HTTPService.

Working situation right know.

In IIS we've got a site configured who is dealing with the client certificate, etc and redirect the full request to http://localhost/csp/healthshare/NAMEPSACE/EnsLib.HL7.Service.HTTPServi… and the web gateway redirects the request to Business Service 'EnsLib.HL7.Service.HTTPService.cls'.

Preferred situation:

We would like to have multiple available endpoints per namespace. According the documentation of the class 'EnsLib.HL7.Service.

Hi Guys, 

I have a DB server (ser-app-db) where IRIS is installed as server.

I have a Web server (ser-app-w) where IRIS is installed as web server and configured as CSP gateway.

I followed the configuration guide and ser-app-w perfectly display the CSP and CLS pages.

But that's not working for my REST service, for exemple with the REST sample:

http://ser-app-db/REST/CRM/Get?ReqID=123(GET): work and show the request

http://ser-app-w/REST/CRM/Get?ReqID=123(GET): return a 404.

I am using Apache server in Linux box.

I am not sure what I am missing in the config.

httpd.

Hi all,

I've configured my Ensemble instance to use IIS 7, according to the instructions CSP Gateway configuration Guide and I've configure the CSP Virtual application.

All the process about Native modules is done.

If I open http://localhost/csp/bin/Systems/Module.cxw I see that it is using the IIS as I expected.

I've created a WebApi and I've deployed in my server

If I call the check method it works 

however, if I call it directly (localhost/myapi/check) it doesn't work.

Error HTTP 404.0 - Not Found

If I check the list of application access in the CSP Web Gateway management, it is in the list.