---
title: 'Tutorial: How to Isolate Access Server''s Web Services'
canonical: https://openvpn.net/as-docs/tutorials/tutorial--isolate-web-services/
product: Access Server Docs
description: This tutorial demonstrates a narrow use case in which you isolate Access Server's web services, making them inaccessible over the internet.
---

# Tutorial: How to Isolate Access Server's Web Services

## Overview

This tutorial shows you how to turn off access to the Admin and Client Web UIs.

> **Caution**
>
> If you turn off access to Access Server's web services, you won't be able to manage Access Server with the Admin Web UI anymore. You must rely on the command-line interface (CLI) to manage settings, users, certificates, and distribute connection profiles.
>
> OpenVPN Connect may also require Access Server's web services to utilize the secure XML-RPC protocol to establish an SSL connection.

## Prerequisites

- An installed Access Server.
- Admin Web UI access.

## Step 1: Turn off access to web services

1. Sign in to the Admin Web UI.
2. Select **Configuration → Network Settings**.
3. Under **Web Service forwarding settings**, set the admin and client web servers to **No**.
4. Set the Admin Web UI **Interface and IP Address** to the localhost.
5. Select **Save Settings** and **Update Running Server**.

> **Note**
>
> After making this change and saving, you won't be able to access the Admin Web UI anymore.

## Step 2: Set firewall ports for TCP and UDP

Now you can set your firewall to only allow ports TCP 443 and UDP 1194, the default ports for the OpenVPN daemons.

Access Server should still be able to establish OpenVPN tunnel connections, but the web interfaces are unreachable.

> **Important**
>
> If you use server-locked profiles for any user accounts, they won't be able to connect anymore. You must use user-locked or auto-login profiles.

---

Prev: [Network and Service Isolation](https://openvpn.net/as-docs/tutorials/network-and-service-isolation.md)
Next: [Tutorial: Set Up an IP Allowlist Using Access Server's Split Tunneling Functionality for Enhanced SaaS Security](https://openvpn.net/as-docs/tutorials/tutorial--saas-allowlist-security-with-split-tunneling.md)
Index: https://openvpn.net/as-docs/llms.txt