# Examples

1. [Home](https://www.agilicus.com/)
2. Examples

![example](https://www.agilicus.com/www/36f53027-example.svg)# Application Notes & Examples

Below is a set of Example setups, showing how to use individual feature areas. For more information on how they work, see the [Product Guide](/anyx-guide/).

Would you like to see a specific application worked-out? Or have questions about one of these? Use the Chat icon on the lower left, or the Get In Touch form.

- [![Agilicus Connector Air Gap Machine With Containers](https://www.agilicus.com/www/75dcd850-person-setup-machine.avif "Agilicus Connector Air Gap Machine With Containers 1")](https://www.agilicus.com/anyx-guide/agilicus-connector-air-gap-containers/)## [Agilicus Connector Air Gap Machine With Containers](https://www.agilicus.com/anyx-guide/agilicus-connector-air-gap-containers/)
    
    Setup a host firewall to create a virtual airgap on a Linux machine running containers with the Agilicus connector.
- [![Agilicus Zero Trust with acSELerator QUICKSET](https://www.agilicus.com/www/bff176bb-2024-05-15_20-07.png "Agilicus Zero Trust with acSELerator QUICKSET 2")](https://www.agilicus.com/anyx-guide/agilicus-zero-trust-with-acselerator-quickset/)## [Agilicus Zero Trust with acSELerator QUICKSET](https://www.agilicus.com/anyx-guide/agilicus-zero-trust-with-acselerator-quickset/)
    
    The SEL Quickset communication software is a tool to quickly and easily configure, commission, and manage devices for power system protection, control, metering, and monitoring. When used via Agilicus, it can be used securely through the AnyX platform via a Zero Trust approach.
- [![Authenticated Remote MCP Server](https://www.agilicus.com/www/3a4de846-user-mcp-firewall-postgresql.avif "Authenticated Remote MCP Server 3")](https://www.agilicus.com/anyx-guide/authenticated-remote-mcp-server/)## [Authenticated Remote MCP Server](https://www.agilicus.com/anyx-guide/authenticated-remote-mcp-server/)
    
    Access your Model Control Protocol (MCP) server securely and remotely with authentication, without firewall changes. This guide demonstrates how to lockdown access to your self-hosted PostgreSQL instance using the Agilicus Launcher, protecting against potential vulnerabilities and ensuring only trusted users can interact with your data.
- [![Automatic Share Access](https://www.agilicus.com/www/7fcd7ef0-agilicus-anyx-share.png "Automatic Share Access 4")](https://www.agilicus.com/anyx-guide/automatic-share-access/)## [Automatic Share Access](https://www.agilicus.com/anyx-guide/automatic-share-access/)
    
    Create a share, allow anonymous users to self-request access to it.
- [![C-more Remote HMI with Agilicus Zero Trust](https://www.agilicus.com/www/b48344db-2024-10-22_09-06.png "C-more Remote HMI with Agilicus Zero Trust 5")](https://www.agilicus.com/anyx-guide/c-more-remote-hmi-with-agilicus-zero-trust/)## [C-more Remote HMI with Agilicus Zero Trust](https://www.agilicus.com/anyx-guide/c-more-remote-hmi-with-agilicus-zero-trust/)
    
    The C-more HMI Panel by Automation Direct is a user-friendly, touch-screen interface designed for controlling and monitoring industrial automation systems. By combining Agilicus AnyX with the existing remote access capabilities, C-more HMIs are secured with Zero-Trust access to enhance efficiency and flexibility in a wide range of applications, from manufacturing to process automation.
- [![Connect to VTScada – Adding a Web Application](https://www.agilicus.com/www/f062ea8c-update.png "Connect to VTScada - Adding a Web Application 6")](https://www.agilicus.com/anyx-guide/connect-to-vtscada-adding-a-web-application/)## [Connect to VTScada – Adding a Web Application](https://www.agilicus.com/anyx-guide/connect-to-vtscada-adding-a-web-application/)
    
    Learn how to add an application to the Agilicus platform and connect to VTScada through a zero trust model
- [![Departmental Sub-Org Setup](https://www.agilicus.com/www/6aae387f-department.png "Departmental Sub-Org Setup 7")](https://www.agilicus.com/anyx-guide/departmental-sub-org-setup/)## [Departmental Sub-Org Setup](https://www.agilicus.com/anyx-guide/departmental-sub-org-setup/)
    
    Methods to manage departmental needs for local-admin and local-resources. Pro/con of each method.
- [![Example: Azure Entra Setup](https://www.agilicus.com/www/c6127b65-azure-entra-app-registration.avif "Example: Azure Entra Setup 8")](https://www.agilicus.com/anyx-guide/example-azure-entra-setup/)## [Example: Azure Entra Setup](https://www.agilicus.com/anyx-guide/example-azure-entra-setup/)
    
    Worked through example showing setup of a custom Azure application registration for auto-user creation, auto-group syncing, zero-touch user provisioning.
- [![Example: Netbox](https://www.agilicus.com/www/f3641e17-image.png "Example: Netbox 9")](https://www.agilicus.com/anyx-guide/example-netbox/)## [Example: Netbox](https://www.agilicus.com/anyx-guide/example-netbox/)
    
    Configure Agilicus AnyX and NetBox to allow single-sign-on remotely.
- [![Hikvision DS-2CD3132-I](https://www.agilicus.com/www/868715db-ds-2cd3132-i.png "Hikvision DS-2CD3132-I 10")](https://www.agilicus.com/anyx-guide/hikvision-ds-2cd3132-i/)## [Hikvision DS-2CD3132-I](https://www.agilicus.com/anyx-guide/hikvision-ds-2cd3132-i/)
    
    The Hikvision DS-2CD3132-I is an embedded CCTV surveillance camera. It is entirely unsafe for it to have any Internet access, either inbound, or outbound. However, it is a solid device with good performance. In this example, we recommend putting the device on an isolated network segment, no inbound, no outbound connectivity. Straddling this segment place a machine running the Agilicus Connector, which makes an outbound connection to the Agilicus AnyX Cloud.
- [![Incident Response Playbook: Agilicus AnyX Environment TEMPLATE](https://www.agilicus.com/www/e2f03a45-sp-800-61r3-life-cycle-model-diagram.png "Incident Response Playbook: Agilicus AnyX Environment TEMPLATE 11")](https://www.agilicus.com/anyx-guide/incident-response-playbook-agilicus-anyx-environment-template/)## [Incident Response Playbook: Agilicus AnyX Environment TEMPLATE](https://www.agilicus.com/anyx-guide/incident-response-playbook-agilicus-anyx-environment-template/)
    
    Incident Response Playbook: Agilicus AnyX Environment TEMPLATE To be customised for your environment.
- [![Locked-Down Networks Certificate Revocation](https://www.agilicus.com/www/b23044be-ocsp-crl-disconnected.png "Locked-Down Networks Certificate Revocation 12")](https://www.agilicus.com/anyx-guide/locked-down-networks-certificate-revocation/)## [Locked-Down Networks Certificate Revocation](https://www.agilicus.com/anyx-guide/locked-down-networks-certificate-revocation/)
    
    Your firewall blocks all but specific outbound IP access. Your Let's Encrypt or other certificates are not checking CRL or OCSP revocation. Here we show how to resolve.
- [![Microsoft Power BI Desktop And Zero Trust with Agilicus](https://www.agilicus.com/www/f47564c8-2024-05-21_07-33.png "Microsoft Power BI Desktop And Zero Trust with Agilicus 13")](https://www.agilicus.com/anyx-guide/microsoft-power-bi-desktop-and-zero-trust-with-agilicus/)## [Microsoft Power BI Desktop And Zero Trust with Agilicus](https://www.agilicus.com/anyx-guide/microsoft-power-bi-desktop-and-zero-trust-with-agilicus/)
    
    With Microsoft Power BI desktop application and Agilicus AnyX one can visually explore data through a free-form drag-and-drop canvas, a broad range of modern data visualizations, and an easy-to-use report authoring experience.
- [![Open WebUI and Ollama Example](https://www.agilicus.com/www/b490a237-open-webui-ollama.webp "Open WebUI and Ollama Example 14")](https://www.agilicus.com/anyx-guide/open-webui-and-ollama-example/)## [Open WebUI and Ollama Example](https://www.agilicus.com/anyx-guide/open-webui-and-ollama-example/)
    
    Use Agilicus AnyX to safely use your Open WebUI / Ollama remotely, with single-sign-on authentication and no port-forwarding or firewall rules.
- [![Phoenix Contact PLCnext Engineer with Zero Trust](https://www.agilicus.com/www/7949c032-plcnext-anyx-guide.png "Phoenix Contact PLCnext Engineer with Zero Trust 15")](https://www.agilicus.com/anyx-guide/phoenix-contact-plcnext-engineer-with-zero-trust/)## [Phoenix Contact PLCnext Engineer with Zero Trust](https://www.agilicus.com/anyx-guide/phoenix-contact-plcnext-engineer-with-zero-trust/)
    
    Support and manage PLCNext devices across multiple customers, multiple sites, simultaneously, without a VPN, with Agilicus AnyX
- ## [Policy Based Access Control By Subnet](https://www.agilicus.com/anyx-guide/policy-based-access-control-by-subnet/)
    
    Augment identity-based security with policy-based access control by subnet. Learn to allow or deny access based on specific IP addresses or ranges.
- [![Print Via Service Forwarder](https://www.agilicus.com/www/75dcd850-person-setup-machine.avif "Print Via Service Forwarder 16")](https://www.agilicus.com/anyx-guide/print-via-service-forwarder/)## [Print Via Service Forwarder](https://www.agilicus.com/anyx-guide/print-via-service-forwarder/)
    
    Print on a remote printer from a local site. Use the Agilicus Connector plus Service Forwarder.
- [![Print via Launcher](https://www.agilicus.com/www/75dcd850-person-setup-machine.avif "Print via Launcher 17")](https://www.agilicus.com/anyx-guide/print-via-launcher/)## [Print via Launcher](https://www.agilicus.com/anyx-guide/print-via-launcher/)
    
    Use a remote printer from a local application via Agilicus Launcher.
- [![Real VNC & Raspberry Pi](https://www.agilicus.com/www/ae2c7d35-raspberry-pi.png "Real VNC & Raspberry Pi 18")](https://www.agilicus.com/anyx-guide/raspberry-pi-vnc-server/)## [Real VNC & Raspberry Pi](https://www.agilicus.com/anyx-guide/raspberry-pi-vnc-server/)
    
    The Raspberry PI (with Raspbian) comes pre-installed with a VNC-like server. This can be configured to support standard authentication and used via Agilicus Any-X
- [![Remote Access Group Policy update via Zero Trust](https://www.agilicus.com/www/a37cab02-0_xc7oyp1zqc_l-fwh.png "Remote Access Group Policy update via Zero Trust 19")](https://www.agilicus.com/anyx-guide/remote-access-group-policy-update-through-time-limited-vpn/)## [Remote Access Group Policy update via Zero Trust](https://www.agilicus.com/anyx-guide/remote-access-group-policy-update-through-time-limited-vpn/)
    
    Enable remote Active Directory policy management using the connector and Windows remote access to keep remote machines up to date.
- [![Rockwell Automation PanelView VNC](https://www.agilicus.com/www/7b6e892e-rockwell-panelview.png "Rockwell Automation PanelView VNC 20")](https://www.agilicus.com/anyx-guide/rockwell-automation-panelview-vnc/)## [Rockwell Automation PanelView VNC](https://www.agilicus.com/anyx-guide/rockwell-automation-panelview-vnc/)
    
    Setup Agilicus AnyX to make secure industrial remote access available to any user, to a Rockwell Automation PanelView HMI. No VPN. No firewall change. Single-Sign-On. Multi-factor authentication.
- [![SNI-Based Camera Routing From NVR](https://www.agilicus.com/www/8d280196-surv-camera.png "SNI-Based Camera Routing From NVR 21")](https://www.agilicus.com/anyx-guide/sni-based-camera-routing-from-nvr/)## [SNI-Based Camera Routing From NVR](https://www.agilicus.com/anyx-guide/sni-based-camera-routing-from-nvr/)
    
    Configure a NVR to use SNI-based routing to an HTTP-capable camera.
- [![SaaS, Cloud Usage Of Internal API](https://www.agilicus.com/www/a2a874e0-image.avif "SaaS, Cloud Usage Of Internal API 22")](https://www.agilicus.com/anyx-guide/saas-cloud-usage-of-internal-api/)## [SaaS, Cloud Usage Of Internal API](https://www.agilicus.com/anyx-guide/saas-cloud-usage-of-internal-api/)
    
    Access an on-premise API from a SaaS application with strong security, simply.
- [![Sample Application Demonstration](https://www.agilicus.com/www/c927b6be-secure-login.svg "Sample Application Demonstration 23")](https://www.agilicus.com/anyx-guide/sample-application-demonstration/)## [Sample Application Demonstration](https://www.agilicus.com/anyx-guide/sample-application-demonstration/)
    
    A sample web server, single executable, instructions on how to run it as if it were e.g. your wiki, and securely expose it to named users on Internet.
- [![Sample Dual-Endpoint Web Application (Dashboard + API)](https://www.agilicus.com/www/2ba61d56-messaging.png "Sample Dual-Endpoint Web Application (Dashboard + API) 24")](https://www.agilicus.com/anyx-guide/sample-dual-endpoint-web-application-dashboard-api/)## [Sample Dual-Endpoint Web Application (Dashboard + API)](https://www.agilicus.com/anyx-guide/sample-dual-endpoint-web-application-dashboard-api/)
    
    Some web applications have HTML + API's separately. See how to login as a single endpoint and use externally without change.
- [![Sample Grafana In Kubernetes](https://www.agilicus.com/www/28d2bb91-graph.svg "Sample Grafana In Kubernetes 25")](https://www.agilicus.com/anyx-guide/sample-grafana-in-kubernetes/)## [Sample Grafana In Kubernetes](https://www.agilicus.com/anyx-guide/sample-grafana-in-kubernetes/)
    
    Secure access to Grafana in Kubernetes: no ingress, any user, single sign on
- [![Sample Hosted Application](https://www.agilicus.com/www/6cd87cfd-hosting.svg "Sample Hosted Application 26")](https://www.agilicus.com/anyx-guide/sample-hosted-application/)## [Sample Hosted Application](https://www.agilicus.com/anyx-guide/sample-hosted-application/)
    
    You compile your web application, we do the rest: hosting, certificate, authentication, logging. Just drag and drop the zip from your build.
- [![Sample Kafka Messaging From AWS VPC To Private Network](https://www.agilicus.com/www/2ba61d56-messaging.png "Sample Kafka Messaging From AWS VPC To Private Network 27")](https://www.agilicus.com/anyx-guide/sample-kafka-messaging-from-aws-vpc-to-private-network/)## [Sample Kafka Messaging From AWS VPC To Private Network](https://www.agilicus.com/anyx-guide/sample-kafka-messaging-from-aws-vpc-to-private-network/)
    
    Access a Kafka broker with no direct network access, both ends firewalled from each other, from the world.
- [![Sample LibreNMS Application](https://www.agilicus.com/www/6ee2f4c4-librenms.png "Sample LibreNMS Application 28")](https://www.agilicus.com/anyx-guide/sample-librenms/)## [Sample LibreNMS Application](https://www.agilicus.com/anyx-guide/sample-librenms/)
    
    Create an authenticating proxy to LibreNMS on a private network.
- [![Sample Node Red](https://www.agilicus.com/www/416794c8-node-red-example-article-hello-world_1.png "Sample Node Red 29")](https://www.agilicus.com/anyx-guide/sample-node-red/)## [Sample Node Red](https://www.agilicus.com/anyx-guide/sample-node-red/)
    
    Node Red is a web-based hardware event programming system. It is ideal to run under Agilicus AnyX
- [![Sample React Application](https://www.agilicus.com/www/98f02fce-react-application.png "Sample React Application 30")](https://www.agilicus.com/anyx-guide/sample-react-application/)## [Sample React Application](https://www.agilicus.com/anyx-guide/sample-react-application/)
    
    Create a sample React application, configure it to use OpenID Connect Authentication and Authorisation to Agilicus platform.
- [![Sample: CNAME With Google Domains](https://www.agilicus.com/www/acfcc210-domain.png "Sample: CNAME With Google Domains 31")](https://www.agilicus.com/anyx-guide/sample-cname-with-google-domains/)## [Sample: CNAME With Google Domains](https://www.agilicus.com/anyx-guide/sample-cname-with-google-domains/)
    
    Configure your own custom domain to use with Agilicus AnyX. Example with Google Domains shown.
- [![Sample: Hosted Icecast](https://www.agilicus.com/www/547343f6-music.svg "Sample: Hosted Icecast 32")](https://www.agilicus.com/anyx-guide/sample-hosted-icecast/)## [Sample: Hosted Icecast](https://www.agilicus.com/anyx-guide/sample-hosted-icecast/)
    
    Learn how to setup an on-site icecast server, give it public Internet access with no firewall changes.
- [![Sample: Rockwell Studio 5000](https://www.agilicus.com/www/2574915f-logistics.png "Sample: Rockwell Studio 5000 33")](https://www.agilicus.com/anyx-guide/sample-rockwell-studio-5000/)## [Sample: Rockwell Studio 5000](https://www.agilicus.com/anyx-guide/sample-rockwell-studio-5000/)
    
    Learn how to use the Agilicus Launcher with Rockwell Studio 5000 RSLinx to seamlessly access PLCs in multiple sites, without a VPN.
- [![Sample: Schneider Electric Control Expert](https://www.agilicus.com/www/06d8c1be-schneider-plc.webp "Sample: Schneider Electric Control Expert 34")](https://www.agilicus.com/anyx-guide/sample-schneider-electric-control-expert/)## [Sample: Schneider Electric Control Expert](https://www.agilicus.com/anyx-guide/sample-schneider-electric-control-expert/)
    
    Learn how to use the Agilicus Launcher with Schnedier Electric Control Expert to seamlessly access PLCs in multiple sites, without a VPN.
- [![Sample: Synology Local SSL](https://www.agilicus.com/www/4a7fc49e-synology-nas-web.png "Sample: Synology Local SSL 35")](https://www.agilicus.com/anyx-guide/sample-synology-local-ssl/)## [Sample: Synology Local SSL](https://www.agilicus.com/anyx-guide/sample-synology-local-ssl/)
    
    No more snake-oil self-signed certificates, even on local lan. Let Agilicus AnyX connector automate the task.
- [![Seeed reComputer R1000](https://www.agilicus.com/www/ec882b0e-seeed-r1000.webp "Seeed reComputer R1000 36")](https://www.agilicus.com/anyx-guide/seeed-recomputer-r1000/)## [Seeed reComputer R1000](https://www.agilicus.com/anyx-guide/seeed-recomputer-r1000/)
    
    Install Agilicus Connector on the Seeed reComputer R1000 Industrial Edge IoT Gateway
- [![Send Email Inside Air Gap](https://www.agilicus.com/www/ece68249-image.png "Send Email Inside Air Gap 37")](https://www.agilicus.com/anyx-guide/send-email-inside-air-gap/)## [Send Email Inside Air Gap](https://www.agilicus.com/anyx-guide/send-email-inside-air-gap/)
    
    Use public email provider from within an air-gap environment using Agilicus Service Forwarder
- [![Send Events to Microsoft Sentinel SIEM](https://www.agilicus.com/www/2fd491eb-anyx-sentinel-memphis.png "Send Events to Microsoft Sentinel SIEM 38")](https://www.agilicus.com/anyx-guide/send-events-to-microsoft-sentinel/)## [Send Events to Microsoft Sentinel SIEM](https://www.agilicus.com/anyx-guide/send-events-to-microsoft-sentinel/)
    
    Send Events from Agilicus AnyX to Microsoft Sentinel SIEM. This will allow you to correlate activities in AnyX with the rest of your system.
- [![Site To Site Transparent Layer 3 Tunnel](https://www.agilicus.com/www/061e2de3-telephone-lines.jpg "Site To Site Transparent Layer 3 Tunnel 39")](https://www.agilicus.com/anyx-guide/site-to-site-transparent-layer-3-tunnel/)## [Site To Site Transparent Layer 3 Tunnel](https://www.agilicus.com/anyx-guide/site-to-site-transparent-layer-3-tunnel/)
    
    Connect two sites in a layer-3 transparent fashion using the Agilicus Connector.
- [![UDP via SSTP VPN](https://www.agilicus.com/www/3b6957e4-udp-sstp-vpn.svg "UDP via SSTP VPN 40")](https://www.agilicus.com/anyx-guide/udp-via-sstp-vpn/)## [UDP via SSTP VPN](https://www.agilicus.com/anyx-guide/udp-via-sstp-vpn/)
    
    Use Agilicus AnyX as a means of connecting a VPN to an otherwise unconnectable location. UDP via SSTP VPN
- [![Using Remote Desktop Gateway through a Launcher](https://www.agilicus.com/www/eb29b507-remote-desktop-style.png "Using Remote Desktop Gateway through a Launcher 41")](https://www.agilicus.com/anyx-guide/exposing-a-remote-desktop-gateway-through-a-launcher/)## [Using Remote Desktop Gateway through a Launcher](https://www.agilicus.com/anyx-guide/exposing-a-remote-desktop-gateway-through-a-launcher/)
    
    This guide will walk you through configuring your machine to access desktops using a Remote Desktop gateway via an Agilicus Connector. This is a different setup than the normal Desktop direct feature.
- [![VTScada Single-Sign-On](https://www.agilicus.com/www/60b03ce4-vtscada.png "VTScada Single-Sign-On 42")](https://www.agilicus.com/anyx-guide/vtscada-single-sign-on/)## [VTScada Single-Sign-On](https://www.agilicus.com/anyx-guide/vtscada-single-sign-on/)
    
    Enable single-sign-on, multi-factor authentication to VTScada for external users via Agilicus AnyX
- [![VTScada and Twilio Inbound Access](https://www.agilicus.com/www/cf8c3ae5-messages.png "VTScada and Twilio Inbound Access 43")](https://www.agilicus.com/anyx-guide/vtscada-and-twilio/)## [VTScada and Twilio Inbound Access](https://www.agilicus.com/anyx-guide/vtscada-and-twilio/)
    
    VTScada and Twilio Inbound Access. VTScada interfaces to Twilio for alert management, nominally requiring inbound IP. Do with private IP, no port forwarding, geo-ip block via Agilicus AnyX