User guide

Chapter 10: Security Settings
151
Checking Your Browser for AES Encryption
IfyoudonotknowifyourbrowserusesAES,checkwiththebrowser
manufacturer,ornavigatetothefollowingwebsiteusingthebrowser
withtheencryptionmethodyouwanttocheck:
https://www.fortify.net/sslcheck.html.Thiswebsitedetectsyour
browserʹsencryptionmethodanddisplaysareport.
Note:IE6doesnotsupportAES12
8or256bitencryption.
AES 256 Prerequisites and Supported Configurations
AES256bitencryptionissupportedonthefollowingwebbrowsers
only:
Firefox2.0.0.7
Mozilla1.7.13
InternetExplorer7
Inadditiontobrowsersupport,AES256bitencryptionrequiresthe
installationofJavaCryptographyExtension(JCE)UnlimitedStrength
JurisdictionPolicyFiles.
JurisdictionfilesforvariousJREʹsareav
ailableatthe“otherdownloads”
sectionofthefollowinglinks:
JRE1.4.2‐http://java.sun.com/j2se/1.4.2/download.html
JRE1.5‐http://java.sun.com/javase/downloads/index_jdk5.jsp
IP Access Control
UsingIPAccessControl,youcancontrolaccesstoyourKXII101unit.
BysettingaglobalAccessControlList(ACL)youarebyensuringthat
yourdevicedoesnotrespondtopacketsbeingsentfromdisallowedIP
addresses.TheIPAccessControlisglobal,affectingtheKXII101unitas
awho
le,butyoucanalsocontrolaccesstoyourunitatthegrouplevel.
RefertogroupbasedIPAccessControlformoreinformationabout
grouplevelcontrol.
Important:IPAddress127.0.0.1isusedbytheKXII101localport.
WhencreatinganIPAccessControllist,if127.0.0.1iswithintherange
ofIPAddressesthatareblocked,youwillnothaveaccesstotheKX
II101localport.
¾ To use IP Access Control:
1. OpentheIPAccessControlpageusingoneofthesemethods: