Adder Technology Placing AdderLink IP alongside the firewall, Ensuring sufficient security

Page 20

Placing AdderLink IP alongside the firewall

AdderLink IP is built from the ground-up to be secure. It employs a sophisticated 128bit public/private key system that has been rigorously analysed and found to be highly secure (a security white paper is available upon request from Adder Technology Ltd). Therefore, you can position the AdderLink IP alongside the firewall and control hosts that are also IP connected within the local network.

IMPORTANT: If you make the AdderLink IP accessible from the public Internet or from a modem, care should be taken to ensure that the maximum security available is activated. You are strongly advised to enable encryption and use strong password. Security may be further improved by restricting client IP addresses, using a non-standard port number for access or limiting remote access to dial up connections only.

Ensuring sufficient security

The security capabilities offered by the AdderLink IP are only truly effective when they are correctly used. An open or weak password or unencrypted link can cause security loopholes and opportunities for potential intruders. For network links in general and direct Internet connections in particular, you should carefully consider and implement the following:

•Ensure that encryption is enabled.

By local configuration or by remote configuration.

•Ensure that you have selected secure passwords with at least 8 characters and a mixture of upper and lower case and numeric characters.

By remote configuration.

•Reserve the admin password for administration use only and use a non- admin user profile for day-to-day access.

•Use the latest Secure VNC viewer (this has more in-built security than is available with the Java viewer). To download the viewer.

•Use non-standard port numbers.

•Restrict the range of IP addresses that are allowed to access the AdderLink IP to only those that you will need to use. To restrict IP access.

•Do NOT Force VNC protocol 3.3. Remote configuration.

•Add a further level of inherent security by restricting access only via modem or ISDN dialup.

•Ensure that the computer accessing the AdderLink is clean of viruses and spyware and has up-to-date firewall and anti-virus software loaded that is appropriately configured.

•Avoid accessing the AdderLink from public computers.

Security can be further improved by using the following suggestions:

•Use a KVM switch with On-Screen-Display driven security access and an auto-logout (after inactivity) feature to provide a second level of security. KVM switches such as the AdderView Matrix or SmartView XPro are recommended.

•Place the AdderLink IP behind a firewall and use port the numbers to route the VNC network traffic to an internal IP address.

•Review the activity log from time to time to check for unauthorized use.

•Lock your server consoles after they have been used.

A security white paper that gives further details is available upon request from Adder Technology Limited.

Ports

In this configuration there should be no constraints on the port numbers because the AdderLink IP will probably be the only device at that IP address. Therefore, maintain the HTTP port as 80 and the VNC port as 5900.

Addressing

When the AdderLink IP is situated alongside the firewall, it will require a public static IP address (i.e. one provided by your Internet service provider).

More addressing information:

Discover DHCP-allocated addresses

DNS addressing

   



19

Page 19 Page 21
Image 20
Page 19 Page 21
Contents AdderLink IP Contents Index Four simultaneous remote users Local userModem/ISDN port IP network/InternetAdderView IP features front and rear What’s in the box What you may additionally need    Mounting Single unit rack bracketsDouble unit rack brackets  Host computer or KVM switch ConnectionsLocal keyboard, video monitor and mouse IP network portTo connect a local keyboard, video monitor and mouse To connect the IP network portPower supply connection To connect the power supplyModem/ISDN port To connect a modem or Isdn portPower control port To connect and address the switch boxesInitial configuration Part 1 Local configurationPart 1 Local configuration Part 2 Remote configurationTo perform the initial local configuration Admin passwordTime and Date EncryptionEncryption settings AdderLink IP encryption settingsViewer encryption settings EncryptionWhich restore setting do I use? To restore mouse operation when hot pluggingHot plugging and mouse restoration Recognising an IntelliMouse-style mouseResetting the configuration AdderLink IP asks for an unknown admin passwordTo invoke a configuration reset by switch AdderLink IP does not display the configuration sequencePart 2 Remote configuration To perform the remote configurationNetworking issues Port settingsPositioning AdderLink IP in the network Placing AdderLink IP behind a firewallAddressing To discover a DHCP-allocated IP addressDNS addressing Firewall/router addressPorts Placing AdderLink IP alongside the firewallEnsuring sufficient security Power switching configuration Power control sequencesTo configure the power sequences for each host computer To control two or more ports simultaneouslyPerforming a flash upgrade To perform a flash upgradeConfigure network option Important Wait until the upgrade is completeConnecting to the AdderLink IP Local connectionTo make a local connection To view the local control menuRemote connections To avoid the ‘hall of mirrors’ effectTo connect using the VNC viewer To connect using your Web browserRemote connection by VNC viewer Remote connection by Web browserMenu bar Using the viewer windowWhen using the viewer window Configure Mouse pointersHost selection To select a hostAccess mode shared/private Power controlAuto calibrate Re-synchronise mouseControls Setting the Threshold manually PhaseContrast  If you need to enter a port number Connecting via dial up modem or Isdn linkDownloading VNC viewer from the AdderLink IP Viewer encryption settings Supported web browsersWindows LinuxTroubleshooting When logging on using VNC viewer, I cannot enter a usernameGetting assistance US +1 888 275Appendix 1 Local configuration menus To access the local configuration menusUnit configuration Network configuration Modem configuration Reset configuration To reset the AdderLink IP configurationTo clear IP access control Clear IP access controlWhat is IP access control? Appendix 2 VNC viewer connection options Colour/EncodingAuto select Preferred encodingInputs MiscDefaults Reload defaultsSave as defaults Save configuration file asAppendix 3 VNC viewer window options Security Appendix 4 Browser viewer optionsEncoding and colour level Main configuration menu Logged on users Appendix 5 Remote configuration menusTo access the remote configuration menus User accounts Screensaver timeout Hardware VersionFirmware Version Host Keyboard LayoutAdvanced unit configuration Idle timeoutProtocol timeout Force VNC protocolIP gateway IP access controlIP network mask Setting IP access control To define a new IP access control entryTo reorder access control entries To edit/remove access control entriesModem port Serial port configurationPower control port Host configuration To create a new host entryLogging and status To copy and paste the logOccurred Click to clear All log entries Refresh ListNet masks Appendix 6 Addresses, masks and portsIP addresses Net masks the binary explanation Inside a bit-wise and functionBinary equivalent Binary octet afterCalculating the mask for IP access control Single locationsAll locations Address rangesRouter/firewall address Security issues with portsPorts RS232 serial mouse to PS/2 converter cable Appendix 7 Cable and connector specificationsAdderLink IP to power switch cable Appendix 8 Hotkey sequence codes Other products in the Adder range WarrantySafety information FCC Compliance Statement United States Radio Frequency EnergyEuropean EMC directive 89/336/EEC United States of America Index 

AdderLink IP specifications

Adder Technology's AdderLink IP is a cutting-edge solution designed to extend and manage KVM (Keyboard, Video, Mouse) signals over IP networks. This innovative technology facilitates the remote access and control of computers and servers, making it an essential tool for organizations that require efficient management of their IT resources.

One of the main features of AdderLink IP is its ability to transmit high-resolution video signals with minimal latency. Supporting resolutions up to 4K at 60Hz, it ensures that users experience clarity and responsiveness that is comparable to direct connections. This capability is crucial for industries such as broadcasting, media production, and any environment where graphics-intensive applications are commonplace.

The AdderLink IP employs advanced digitization techniques to ensure high-quality video transmission over standard IP networks. Its use of H.264 video compression allows for efficient bandwidth usage while maintaining image integrity. With this feature, users can easily adapt to various network conditions without compromising performance.

Another standout characteristic is the support for real-time remote access through a web browser, allowing users to connect to their systems from virtually anywhere in the world. Whether for troubleshooting, maintenance, or system management, the AdderLink IP empowers IT professionals with the flexibility they need to perform their duties effectively. The built-in security protocols ensure that access is both secure and reliable.

Moreover, AdderLink IP is designed to be user-friendly. Configuration and management can be performed via an intuitive web interface, simplifying the setup process for users of all technical skill levels. Compatibility with a range of operating systems and devices further enhances its versatility.

Furthermore, the system supports multi-user access, enabling multiple operators to connect to the same devices simultaneously without conflicts. This functionality is particularly useful in collaborative environments where teams need concurrent access to critical systems.

In summary, Adder Technology's AdderLink IP stands out as a robust solution for KVM over IP needs. With its high-quality video transmission, real-time remote access, ease of use, and enhanced security features, it enables organizations to effectively manage their IT infrastructure, thereby boosting productivity and operational efficiency. As the demand for remote access increases, AdderLink IP remains a pivotal component in the evolution of IT management solutions.
Top Page Image Contents