In some cases it can be useful to enable temporary HTTP access to a station within a network, e.g. via HTTP (TCP port 80) or TELNET (TCP port 23). For example, if questions come up concerning network devices, the Support department is best able to assist when they have direct access to the device in the customer's network. The standard method for accessing networked devices via inverse masquerading (port forwarding) sometimes requires a special configuration of the firewall—changes are made which, if they are not deleted again afterwards, can represent a security risk.
As an alternative to permanent access which is based on port forwarding, a temporary remote-maintenance access can be set up that automatically closes again after certain periods of inactivity. This is done by creating a TCP/HTTP tunnel for the Support staff, which gives them temporary access to the relevant device.
