User guide

ManageEngine Firewall Analyzer :: User Guide

285

Zoho Corp.

Enabling HTPPS (SSL)

• In the same file, enable the HTTPS connection parameters, by removing the <!--

tag before, and the --> tag after the following lines:

<!--

<Connector port="8443" address="${jboss.bind.address}"

maxThreads="100" minSpareThreads="5" maxSpareThreads="15"

scheme="https" secure="true" clientAuth="false"

keystoreFile="${jboss.server.home.dir}/conf/chap8.keystore"

keystorePass="rmi+ssl" sslProtocol = "TLS" />

-->

While creating keystore file, you can enter the password as per your requirement.

But ensure that the same password is configured, in the server.xml file. Example

password is configured as 'rmi+ssl'.

Verifying SSL Setup

1. Restart the Firewall Analyzer server.

2. Verify that the following message appears in the command window after the

Firewall Analyzer application is started:

Server started.

Please connect your client at https://localhost:8500

3. Connect to the server from a web browser by typing https://<hostname>:8500

where <hostname> is the machine where the server is running

Configuring HTTPS Configuration Parameters for 64 bit/128 bit encryption

If you want to configure the HTTPS connection parameters for 64 bit/128 bit encryption,

add the following parameter at the end of the SSL/TLS Connector tag:

SSLCipherSuite="SSL_RSA_WITH_3DES_EDE_CBC_SHA"

<Connector port="8443" address="${jboss.bind.address}"

maxThreads="100" minSpareThreads="5" maxSpareThreads="15"

scheme="https" secure="true" clientAuth="false"

keystoreFile="${jboss.server.home.dir}/conf/chap8.keystore"

keystorePass="rmi+ssl" sslProtocol = "TLS"

SSLCipherSuite="SSL_RSA_WITH_3DES_EDE_CBC_SHA"/>