Re: Sonicwall Remote Admin Question

From: .Saphyr (saphyr_at_infomaniak.ch)
Date: 07/02/03


Date: Wed, 02 Jul 2003 15:59:20 GMT


> Hi, all.
>
> What's the easiest way to set up the
> Sonicwall PRO (330) to be able to
> access its embedded web server from
> the outside?
>
> Thanks,
> bn

Hi,

"Easiest" - "firewall" - "from outside" are words you usually not use
in the same sentence when talking about firewall configuration.

Anyway, from the easiest to the most secure:
1) open the web server port on your firewall.
2) open the web server port on your firewal and restrict ip source access on it
3) establish a secured connection to your firewall before configuring it
(vpn or other tunnelling stuff) , this will however ask you to keep that port
opened.
4) if you have choosen a Pro 330, you surely have a DMZ with
open ports accessible from the outside. Put a ssh server if you dont already
have one (or other tunneling/vpn stuff with consistent security) and only connect
to it through a secure channel. Only open that remote server ip access to
the firewall web management server.
5) do not use the web interface and set your firewall correctly, at least
in a way you dont have to connect to it from an external network

hope I helped you ! : )=

.antoine



Relevant Pages

  • Re: disconnect a hacker
    ... My Web server station is right next ... my attention divided by security concerns... ... see an IP connected to port 80, ... I've been forwarding my firewall logs to my ISP, ...
    (alt.computer.security)
  • Re: Firewall on server itself
    ... Perhaps the iptables could defend against an intruder who is already ... Firewall vender specific vulnerabilities ... >> be configured to protect the web server as well other computers on ... > The Gartner Group just put Neoteris in the top of its Magic Quadrant, ...
    (Security-Basics)
  • Re: [fw-wiz] Using SSL accelerators in firewalls
    ... It also depends on what you're using your SSL for, and how tightly you can couple ... your firewall with your web application. ... web server don't have to be very aware of each other. ... >> lost in the process and the security of transactions eroded. ...
    (Firewall-Wizards)
  • Re: security advice (possible hacker activity?)
    ... > trojan or worm is installed onto the web server. ... > itself through the firewall to an email user on a PC, ... > the IIS web server. ... IWAM runs any site with Access or SQL. ...
    (microsoft.public.inetserver.iis.security)
  • Re: security advice (possible hacker activity?)
    ... > trojan or worm is installed onto the web server. ... > itself through the firewall to an email user on a PC, ... > the IIS web server. ... IWAM runs any site with Access or SQL. ...
    (microsoft.public.win2000.security)

Quantcast