Administration services

The following figure shows the Administration Services page:

Figure 6-1

By default the CyberGuard SG appliance runs a web administration server and a telnet service. Access to these services can be restricted to specific interfaces. For example, you may want to restrict access to the Web Management Console web administration pages (Web Admin) to machines on your local network. Disallowing all services is not recommended, as this will make future configuration changes impossible unless your CyberGuard SG appliance is reset to the factory default settings.

You can also select to accept ICMP messages on the Internet port. For example, if you disallow echo requests (the default for increased security), your CyberGuard SG appliance will not respond to pings on its Internet port. Destination unreachable ICMP messages are always accepted.

69

Firewall

Page 73
Image 73
SnapGear 2.0.1 user manual Administration services