Table of Contents
Advertisement
SSL devices are shipped without passwords. Setting passwords is important because the
device can be administered over a network. For more information about passwords, see
the commands password access and password enable in Chapter C Command
Summary.
Access Lists
Access lists control which computers can attach to a specific device. When you initially set
up the SSL appliance, no access lists exist. You can restrict the computers allowed to
manage the appliance by adding their IP addresses to one or more access lists for each
device. For more information about configuring access lists, see the commands show
access-list, show access-lists, access-list, remote-management access-list, telnet
access-list, and web-mgmt access-list in Chapter C Command Summary.
Encrypted Management Sessions
To further protect the configuration security, you can specify that remote (non-serial and
non-telnet) configuration sessions be encrypted using AES, DES, or ARC4. See remote-
management encryption in Chapter C Command Summary.
Appliance Factory Default Reset Password
If you have forgotten your access or enable password, you can use a factory-set password
during a serial configuration session. When prompted for a password, enter "FailSafe"
(case-sensitive, without quotation marks). You are asked to confirm the action. The
appliance configuration reboots (reloads) with factory default settings.
Caution: All configuration is lost when using the factory default reset.
Methods to Manage the SonicWALL SSL Appliance
You can configure the SonicWALL SSL appliance using one of four methods, three of which
use the command-line interface configuration manager.
•
Serial connection, configuration manager
— An IP address need not have been assigned to the appliance for management
— Can set the appliance to single-port mode during a management session
— Can manage only to the appliance physically connected to the serial cable
— FailSafe password can be used to return the appliance to factory defaults
•
Telnet connection, configuration manager
— An IP address must have been assigned to the appliance
— Cannot set the appliance to single-port mode during a management session
— Can manage only one appliance
Appendix C Command Summary
Page 77
Advertisement
Table of Contents
