Firewall Configuration - HP P4518A - Traffic Management Server Sa7150 User Manual

C H A P T E R 4
NOTE: The device
automatically adjusts the
list of MapIDs as they are
created and deleted, thus
MapID 2 becomes MapID
1 when the default (the
original MapID 1) is
deleted.
NOTE: In this
configuration, the
firewall may occasionally
report the blocking of
outbound packets from
the Server on port 81.
This is normal—a side-
effect of the varying
latencies characteristic of
Internet traffic—and does
not indicate a problem
with the configuration.
Scenario 6—Configuring a Firewall
4. Once a user-created server assignment exists, the default
mapping can be deleted. In this example, delete MapID
number 1.
HP SA7150> list map
Map
ID KeyID Server IP Port
== ===== ========= ===== ==== ======== =====
1 default 1.1.1.3 443
5. Save the configuration.
HP SA7150> config save
Saving configuration to flash...
Configuration saved to flash
HP SA7150>

Firewall Configuration

Absent a firewall, outside clients would be able to connect to services
on the web server and possibly gain access to sensitive data—on port
80 using HTTP to access non-sensitive data, on port 443 using
HTTPS to access sensitive data, and on port 81 using HTTP to access
that same sensitive data. Obviously, allowing access to sensitive data
over an unencrypted connection on port 81 is not desirable.
Consequently a firewall should be configured to prevent such access.
Port
80
443
All Others
Net Ser Cipher Re-
Port Suites direct Auth
81 all(v2+v3) n
Access
Allowed
Allowed
Denied
Client well
XML form
===== === ====
n n N/A
69