MSI Supero CSE-M35S Guide de l'utilisateur télécharger pdf (Page 285)

ManageEngine Firewall Analyzer :: User Guide

284

Zoho Corp.

Configuring Secure Communication - SSL

The SSL protocol provides several features that enable secure transmission of Web

traffic. These features include data encryption, server authentication, and message

integrity.

You can enable secure communication from web clients to the Firewall Analyzer server

using SSL.

The steps provided describe how to enable SSL functionality and generate

certificates only. Depending on your network configuration and security needs, you

may need to consult outside documentation. For advanced configuration concerns,

please refer to the SSL resources at http://www.apache.org and

http://www.modssl.org

• Generating a valid certificate

• Disabling HTTP

• Enabling HTPPS (SSL)

• Verifying SSL Setup

• Configuring HTTPS Configuration Parameters for 64 bit/128 bit

encryption

• Using the existing SSL certificate

• How to install SSL certificate for Firewall Analyzer

Generating a valid certificate

Stop the server, if it is running.

Follow the instructions given below for SSL Installation:

If you have a keystore file for using HTTPS, place the file under <Firewall Analyzer

Home>\server\default\conf directory and rename it as "chap8.keystore"

Disabling HTTP

When you have enabled SSL, HTTP will continue to be enabled on the web server port

(default 8080). To disable HTTP follow the steps below:

1. Edit the server.xml file present in <Firewall Analyzer

Home>/server/default/deploy/jbossweb-tomcat50.sar directory.

2. Comment out the HTTP connection parameters, by placing the <!-- tag before,

and the --> tag after the following lines:

<Connector port="8080" address="${jboss.bind.address}"

maxThreads="150" minSpareThreads="25" maxSpareThreads="75"

enableLookups="false" redirectPort="8443" acceptCount="100"

connectionTimeout="20000" disableUploadTimeout="true"/>

1 2 ... 280 281 282 283 284 285 286 287 288 289 290 ... 308 309

Pas de commentaire

MSI Supero CSE-M35S Guide de l'utilisateur Page 285