User guide

Configuring SSH
Chapter 22: Controlling the Appliance via the Command Line 717
Configuring SSH
Safe@Office appliance users can control the appliance via the command line, using the
SSH (Secure Shell) management protocol. You can enable users to do so via the Internet,
by configuring remote SSH access. You can also integrate the Safe@Office appliance with
SSH-based management systems.
Note: The Safe@Office appliance supports SSHv2 clients only. The SSHv1 protocol
contains security vulnerabilities and is not supported.
Note: Configuring SSH is equivalent to creating a simple Allow rule, where the
destination is This Gateway. To create more complex rules for SSH, such as allowing
SSH connections from multiple IP address ranges, define Allow rules for TCP port
22, with the destination This Gateway. For information, see Using Rules on page 400.
To configure SSH
1. Click Setup in the main menu, and click the Management tab.
The Management page appears.
2. Specify from where SSH access should be granted.
Refer to the following table.
Warning: If remote SSH is enabled, your Safe@Office appliance settings can be
changed remotely, so it is especially important to make sure all Safe@Office
appliance users’ passwords are difficult to guess.