SafeLinx and HCL Nomad Web: Next Notes Client Generation

You should pay special attention to the infrastructure that keeps the entire IT system running. Especially, at the beginning of your journey to HCL Nomad Web. That’s important, because it must meet all security standards to ensure the smooth operation of HCL Nomad Web.

We will therefore take a look at what we actually need for the infrastructure for HCL Nomad Web.

Best to start at the beginning. HCL Nomad (mobile) and Nomad Web (HCL for Web Browser) are not the same thing.

HCL Nomad Web is very different from Nomad (mobile) actually.

You need the following components for a successful HCL Nomad Web Deployment in your infrastructure.

In addition to point 5, it should be mentioned that any customer who is in the CCB license model of HCL may use the HCL SafeLinx Server and HCL Nomad Web at no additional cost. On HCL’s official website, you can find the specifics of this in the requirements of Nomad Web.

Classically, the SafeLinx Server is placed in the DMZ (demilitarized zone). However, it is also possible to operate several SafeLinx nodes in the infrastructure without any problems. For example, a SafeLinx server in the DMZ and one in the LAN. As an example, we have opted for the variant in the DMZ in our presentation.

It is also easy to see the paths that the packets have to take and which ports are used here. The graphic is of course simplified, but still accurate. As you can see, it is not only possible to offer the service “HCL Nomad Web” from the outside via HCL SafeLinx. Access is also possible in the corporate network without any problems, if the firewall allows it.

The HCL SafeLinx Server can be used for many HCL products. The server not only serves as a so-called  entry point for HCL Nomad Web, but also supports you in the integration and external access of many HCL products.

HCL SafeLinx can also be used as a reverse proxy for HCL Verse or iNotes. It is easy to access the PIM data from outside without having to put a Domino server in the DMZ. External access for HCL Connection, SameTime and of course Domino is also supported.

HCL SafeLinx can also play a key role in the realization of a high availability solution from HCL Traveler. Here, HCL SafeLinx takes over extensive load balancer functions and thus contributes significantly to the already excellent stability of HCL Traveler.

Unfortunately, the current version of the HCL Notes Client lacks the possibility to use the WSS protocol supported by the HCL SafeLinx. As soon as the Notes Client supports this protocol in addition to the TCP/IP port, the access of the Notes Client from outside without VPN or the “passthru Server” can also be realized.

We’d love for HCL to add this feature to the Notes client soon.

For the realization of the HCL SafeLinx Server you need a virtual or physical machine that is equipped according to the requirements.  You can read exactly what these requirements are in this article “HCL SafeLinx 1.3 System Requirements” by HCL.

In summary, this means as follows:

On the server, install  the HCL SafeLinx Server yourself. For the configuration of SafeLinx either one of the supported relational databases can be used or for test or small environments, the file system. In any case, we recommend using one of the relational databases.

The next step is to place the HCL Nomad Web static Webfiles. This is basically a zip that contains the necessary web files for compiling and displaying the Web Notes client. These can be stored either on the HCL SafeLinx server itself or on the Domino server. For storage under Domino, you should first read the Knowledge Base article “Hosting the Nomad for web browsers static web files” by HCL. The relational database also does not have to be installed on the SafeLinx server. An existing and accessible database server is of course sufficient.

At the time of this post, the following versions are current.

In conclusion, it is really worthwhile to visit HCL regularly to look for current versions. Both components, HCL Nomad Web and HCL SafeLinx, are updated approximately every quarter. Unlike HCL Nomad (mobile), HCL SafeLinx for Nomad Web is not only recommended, but also a technical requirement. If you want to use HCL Nomad Web in your company, you absolutely need a SafeLinx server. For those for whom an SSO option is important, SafeLinx supports SSO via SAML. The functionality is thus given, even if the configuration of the same is still expandable.

If you need help setting up or configuring, we can recommend our ebook “The Ultimate Guide to SafeLinx for Nomad“.

UPDATE (2022-11-02)
Since version 1.0.5 of HCL Nomad there is also the possibility to host HCL Nomad without using HCL SafeLinx. You can also run HCL Nomad directly on a Domino server, provided that you have a Domino server 12.0.1. In a later article we will discuss this in more detail.

HCL documentation hint: https://help.hcltechsw.com/nomad/1.0_admin/nomadserver_domino.html