Identification Portal; Connection; Presentation - Stormshield SN series Configuration Manual

IDENTIFICATION PORTAL

For the sake of strengthening security, the connection to the authentication portal and to the Web
administration interface is possible only by forcing certain options in the SSL protocol. Version
SSLv3 is disabled and the TLS versions enabled, according to the recommendations given by the
French Network and Information Security Agency (ANSSI).
As these options are not supported in Internet Explorer versions 6, 7 and 8, you are advised to
use a higher version of this browser. Nonetheless, this mode may be disabled via command line
in the CLI (CONFIG AUTH HTTPS sslparanoiac=0 / CONFIG AUTH ACTIVATE).

Connection

In order to configure your Stormshield Network firewall, you need to log onto the web
administration interface.
Configuration of a firewall is only accessible to administrators of the product. The "super admin"
user or the administrator who holds all privileges can assign privileges to users and/or user
groups in the menu System>Administrators.

Presentation

The connection module consists of 2 sections:
A static section
l
A collapsible section: options
l
The information required depends on whether it is the administrator's first connection to the
firewall.
User
Password
Authentication with
SSL certificate
Log in
The Stormshield Network Firewall is case- sensitive and distinguishes uppercase and
lowercase letters, both for the username as well as for the password.
Additional Options
Page 155/448
This field is reserved for users who have at least basic privileges.
User's password, which he will be asked to enter upon his initial connection. For a
default configuration, no passwords need to be entered (empty field).
If this option is selected, the fields Username and Password will no longer be
necessary, and therefore grayed out.
The following message will appear: "Using a certificate will allow you to authenticate
automatically. Enable automatic authentication?". " Select Manual authentication or
Automatic authentication.
REMARK
The automatic connection option can be enabled automatically in the section
Preferences\Connection settings\ Connect automatically with an SSL
certificate.
Clicking on this button or pressing "Enter" will allow sending connection information to
the firewall.
Warning
SNS - USER CONFIGURATION MANUAL V.3
sns-en-user_configuration_manual-v3 - Copyright © Stormshield 2016
IDENTIFICATION PORTAL