User manual

network SecurIty
Network Security Policy determines how access to the DataGuard
Management Interface is handled. Access Protection enables and
configures secure connections, implements block policies for IP
addresses that fail the secure connection challenge, and determines
which connection protocols are allowed.
To set up Security Policy:
1. From the Administration tab, click the Network Security menu
item, then click the Security Policy button and complete these
settings:
• HTTPs Redirection—Redirects incoming HTTP connections
to the more secure HTTPs protocol. Options are All (all HTTP
connections including local network), or Internet Connection Only
(only HTTP connection from the Internet). The default is Never
(disabled).
• I/O Policy—Allows or denies access to specified IP addresses.
For Allow IP, type the IP address or addresses that are allowed to
connect. These will be the only IP addresses that can connect to
the DataGuard Management Interface. Include the IP address of
the system currently being used. For Deny IP, type the IP address
or addresses that are NOT allowed to connect. Any IP address not
listed will be allowed. The default is Allow All (any IP address can
connect).
✴ To enable administrative access over the Internet, check the
Allow Administrator from Internet button.
✴ To enable administrative login over SSH/Telnet, check the Allow
Root Login By SSH/Telnet button.
2. When done, click the Save button.
Administration > Network Security > Security Policy
To set up Access Protection:
1. From the Administration tab, click the Network Security menu
item, then click the Access Protection button and complete these
settings:
• Enable Services—Check to enable the Access Protection as
configured in this menu.
• Block Policy—Determine how to handle a failed login.
• Protocol—Choose which connection protocols to enable.
2. When done, click the Save button.
To set up SSL Certificate:
1. From the Administration tab, click the Network Security menu
item, then click the SSL Certificate button and complete these
settings:
• Specific SSL Certificate—Check to enable the function.
• Certificate (X.509 format)
• Private Key (X.509 format)
2. When done, click the Save button.
59
✓
✓