Secure Computing SG300 User Manual page 144

Note
Changing the web server port number is recommended if you are allowing Internet
access to the Management Console. This may help hide the web management console
from casual web surfers who type your SnapGear units Internet IP address into a web
browser.
Ideally, you should use packet filter rules (see the Packet Filtering section later in this
chapter) to restrict who has access for remote administration (i.e. allow connections on
the administrative web server port from trusted originating IP addresses only).
Enable HTTP Management is checked by default, this allows the HTTP functionality of
the SnapGear Management Console to be enable or disabled. The web management
console runs on the default HTTP port 80.
In the Port for HTTP field, you are able to change the port that the SnapGear
Management Console is configured on. This is particularly useful if you want to use the
default port for another purpose.
After changing the web server port number, you must include the new port number in the
URL to access the pages. For example, if you change the web administration to port
number 88, the URL to access the web administration is similar to: http://192.168.0.1:88
SSL/HTTPS (Secure HTTP)
A certificate for HTTPS access is generated automatically as of version 3.1.4 of the
firmware, when the unit is first booted. This certificate contains default information for
country, city, and related fields. It is enough to allow HTTPS access out-of-the-box, and
it is relatively secure as no two SnapGear devices will have the same certificate.
However, SecureComputing strongly recommends that an appropriate site-specific
certificate be manually created or uploaded to the device at the earliest possible
convenience in order for remote clients to be able to establish the authenticity of the
certificate upon connection (chain of trust, root-cert signed, site-specific fingerprint etc.).
Note
Not available on the SG530 or SG630.
The Enable HTTPS Management field allows the HTTPS functionality of the SnapGear
Management Console to be enabled or disabled.
138
Firewall