Grandstream Networks GXP21 Series Security Manual page 17

•
Use HTTPS for web UI access
GXP Web UI access should be equipped with strong administrator password in additional to using
HTTPS. Also, do not expose the GXP web UI access to public network for normal usage.
•
Use HTTPS for firmware downloading and config file downloading
Use HTTPS for firmware downloading and provisioning. Besides that, set up username and password
for the HTTP/HTTPS server to require authentication. It's also recommended to turn on "Validate Server
Certificates" so the GXP will validate server certificate when downloading the firmware or config file.
GXP Security Guide
P a g e | 16