Black Box ET0100A manual Inbound trusted host protocols used by EncrypTight, To add a trusted host

ETEP Configuration

Inbound host protocols (HTTPS, ICMP, and SNMP) are enabled and disabled in the Edit Trusted Host window. Inbound protocols are enabled by default for each host. Use caution when disabling these protocols as it can affect the management station’s ability to communicate with the ETEP.

Table 91 Inbound trusted host protocols used by EncrypTight

Protocol

HTTPS

ICMP

SNMP

Description

Used for secure communication between the management station and the ETEP.

Used for pings and other diagnostic and routing messages.

Used to get SNMP data from the ETEP (name, location, and contact).

You cannot add, modify or delete an outbound host directly from the trusted host list. You must make changes in the Appliance editor tab for that feature (Table 92). When you add an outbound host such as a syslog server, NTP server or SNMP trap host to the appliance configuration, the host’s IP address is automatically added to the trusted host list. For example, if you add a syslog server in the Appliance editor Logging tab, the syslog server is automatically added to the trusted host list as shown in Figure 107.

The process is similar when deleting an outbound host. Using the syslog server as an example, delete the syslog server from the Logging tab. One of two outcomes occur:

●If no other ports are enabled for that IP address, the trusted host entry is automatically deleted.

●If other ports are enabled for that IP address the change is automatically reflected in the trusted host list, which displays a status of “no” in the Syslog column for that IP address. You can then either leave the modified entry as is, or you can select the trusted host entry and click Delete to remove it from the trusted host list.

Table 92 Modify outbound trusted hosts on their respective Appliance editor tabs

Outbound host	Appliance Editor Tab
Syslog server	Logging
NTP	Advanced
SNMP traps	SNMP

To add a trusted host:

1On the Trusted Hosts tab, click Enable Trusted Hosts.

2Click Add.

3In the Edit Trusted Hosts window, enter the IP address of the trusted host.

With ETEP software version 1.6 and later, you can use either IPv4 or IPv6 addresses.

4Restrict any of the inbound protocols for the host by clearing the checkbox for the protocol (see Table 91). At least one trusted host in the list must have HTTPS enabled.

5Click OK. The trusted host and associated protocols appear in the trusted host list.

6Repeat steps 2-5 for each additional trusted host that you want to define.

312 EncrypTight User Guide