LEGRAND Server Technology PRO3X User Manual page 183

• Enable or disable HTTPS access. •
• Enable HSTS: Default is enabled. •
• Default port is 443. You can enter a custom port. •
Warning: Different network services cannot share the same TCP port.
▶
Special note for AES ciphers:
The PRO3X device's TLS-based protocols support AES 128- and 256-bit ciphers. The exact cipher to use is
negotiated between PRO3X and the client (such as a web browser), which is impacted by the cipher
priority of PRO3X and the client's cipher availability/settings.
Tip: To force PRO3X to use a specific AES cipher, refer to your client's user documentation for
information on configuring AES settings. For example, you can enable a cipher and disable the other in
the browser via the "about:config" command.
Regaining Access with HSTS and Expired Certificate
HSTS is enabled by default in the Device Settings > Security > HTTP settings. When HSTS is enabled, you
can only access PRO3X via web browser when a valid, unexpired certificate is installed. HSTS removes
the ability for users to click through warnings about invalid certificates.
If access is lost due to HSTS restrictions, there are 2 methods to regain access.
▶
Replace the certificate locally on the PRO3X:
1) Save the new key and certificate to a USB drive.
2) Use one of the USB configuration methods to upload the new certificate to the device.
▶
Replace the certificate over an insecure connection:
1) Disable the client web browser HSTS security, and then access the PRO3X "insecurely."
2) Replace the certificate in Device Settings > Security > TLS Certificates, then enable the HSTS security.
Configuring SNMP Settings
You can enable or disable SNMP communication between an SNMP manager and the PRO3X. Enabling
SNMP communication allows the manager to retrieve and even control the power status of each outlet.
You may also need to configure the SNMP destination(s) if the built-in "System SNMP Notification Rule"
is enabled and the SNMP destination has not been set yet. See
▶
To configure SNMP communication:
1) Choose Device Settings > Network Services > SNMP.
Event Rules and Actions (on page 213).
183