Login Control; Web Server; Security - Colubris Networks WCB-200 Admin Manual

WCB-200 Admin Guide

Login control

To maintain the integrity of the configuration settings, only one administrator can be connected to
the management tool at a given time. To prevent the management tool from being locked by an idle
administrator, two mechanisms are in place:
• If an administrator's connection to the management tool remains idle for more than ten
minutes, the WCB-200 automatically terminates the administrator's session. You can configure
this mechanism on the management tool configuration page.
• If a second administrator connects to the management tool and authenticates with the correct
username and password, the first administrator's session terminates. You can configure this
mechanism on the management tool configuration page.
• If login to the management tool fails five times in a row (bad username and/or password), login
privileges are blocked for five minutes. Once five minutes expires, login privileges are once
again enabled. However, if the next login attempt fails, privileges are again suspended for five
minutes. This cycle continues until a valid login occurs. This option is not configurable.

Web server

You can also configure the web server ports from which access to the management tool is
permitted.
• Secure web server port: Specify a port number for the WCB-200 to use to provide secure
HTTPS access to the management tool. Default is 443.
• Web server port: Specify a port number for the WCB-200 to use to provide standard HTTP
access to the management tool. These connections are met with a warning, and the browser is
redirected to the secure web server port. Default is 80.

Security

The management tool is protected by the following security features:
• HTTPS: Communications between a management station and the WCB-200 is protected using
the Secure Hypertext Transport Protocol. Before logging on to the management tool, you must
accept a security certificate. A default certificate is provided with the service controller. You can
replace this certificate with your own. For more information, see
page 40.
• Port blocking: You can enable or disable access to the management tool for each of the
following:
• LAN port 1
• Wireless port
• Allowed IP address: You can configure a list of subnets from which access to the
management tool is permitted.
These security settings also apply when SSH is used to access the command line
Note:
interface.
21
"Managing certificates" on
4 Working with the WCB-200