Secure Computing SG550 Manual de usuario descargar pdf (Pagina 133)

Firewall

129

You can also select to Accept echo request (incoming port) on Internet interfaces.

The default is to disallow echo requests, so your SG unit does not respond to pings on its

Internet interfaces. This may make it more difficult for external attackers scanning for

hosts to discover your SG unit. Destination unreachable ICMP messages are always

accepted.

Web Server

Click the Web Server tab to configure the SG unit’s administrative web server. This web

server is responsible for running the web management console.

Here you can change the port on which the server runs. Most SG units support enabling

SSL encryption for establishing secure connections to the web management console

from SSL enabled browsers.

Note

Changing the web server port number is recommended if you are allowing Internet

access to the Management Console. This may help hide the web management console

from casual web surfers who type your SG unit’s Internet IP address into a web browser.

Ideally, you should use packet filter rules (see the Packet Filtering section later in this

chapter) to restrict who has access for remote administration (i.e. allow connections on

the administrative web server port from trusted originating IP addresses only).

By default, the web management console runs on the default HTTP port (i.e. 80).

1 2 ... 128 129 130 131 132 133 134 135 136 137 138 ... 296 297

Sin comentarios

Secure Computing SG550 Manual de usuario Pagina 133