# Open a device's web interface over HTTPS

> Open a device's web management page in your browser through a probe, without a direct network path to the device.

Section: Connect  
Source: https://www.itva.com/docs/connect/open-a-device-web-interface-over-https  
Last updated: 2026-11-03

When you finish, you will have the device's web interface open in a new browser tab.

## Before you begin

- Your role has the **Manage** permission for **Connect** and **Devices**.
- The device has a primary or secondary probe, and that probe can reach the device's web interface.
- You have an account on the device's web interface.
- If the device requires MFA, MFA is set up on your ITVA account.
- Your browser allows pop-ups from ITVA. ITVA opens the session in a new tab.

## Open an HTTPS session

1. Open the device's page and select **Connect**. You can also open the **Connect** page and select the device.
2. Set **Protocol** to **HTTP**. For Fortigate, Palo Alto, SonicOS, and HiveMQ devices, ITVA selects it for you.
3. Check the **IP Address** and **Port**. The vendors in step 2 use the device's management port. Other devices use port 443.
4. Select **Connect via HTTP/s**.
5. If ITVA asks for a one-time password, enter the code from your authenticator app and select **Verify**.
6. In the new tab, sign in to the device with your device account.

ITVA does not sign you in to the device. You use the device's own login page.

## How HTTPS sessions work

Each session gets its own URL on your ITVA domain. Only the user who started the session can open that URL.

ITVA ends a session after about 15 minutes without activity. To continue after that, start a new session.

When a session starts, ITVA backs up the device's configuration. If the configuration changed during the session, the log in **HTTP Logs** has a **Change Summary**.

## Check that it worked

A new tab opens and shows the device's login page. The session also shows in **Settings** > **Logging** > **HTTP Logs**.

## Troubleshooting

### No new tab opens

If your browser blocks pop-ups, allow them for ITVA. Then start the session again.

### The device has no probe

Error: "The selected device does not have a primary or secondary probe assigned." Assign a primary or secondary probe to the device, then try again.

### Connection limit reached

Error: "Unable to build an HTTP connection due to a connection limit being reached." Too many HTTPS sessions are open. Wait a few minutes for idle sessions to end, then try again.

### Network error

Error: "Unable to build an HTTP connection due to a network error." ITVA cannot reach the probe. Make sure that the probe is online, then try again.

### One-time password not accepted

Error: "The supplied One-Time Password does not match this account." Enter the current code from your authenticator app.