Author Topic: MBG system-manager webUI disable for external interface  (Read 985 times)

Offline mitelrvtd

  • Jr. Member
  • **
  • Posts: 59
  • Country: us
  • Karma: +1/-0
    • View Profile
MBG system-manager webUI disable for external interface
« on: March 04, 2024, 02:23:07 PM »
We are able to access the Server-Manager WebUI login screen from the external interface of our MBGs.

The external IP address is not listed in Trusted Networks, just the LAN side IP.

I thought we had this disabled in the past but we are not sure how to disable the external access.

Thank you


Offline lundah

  • Global Moderator
  • Hero Member
  • *****
  • Posts: 1215
  • Country: us
  • Karma: +66/-0
  • Senior Chief Grunt
    • View Profile
Re: MBG system-manager webUI disable for external interface
« Reply #1 on: March 05, 2024, 10:12:08 AM »
Go to Remote Proxy -> Domain List, edit your domain. Towards the bottom of the settings, make sure the checkbox for "Do you wish to permit remote administrative access?" is unchecked to disable admin access from the WAN side.

Offline mitelrvtd

  • Jr. Member
  • **
  • Posts: 59
  • Country: us
  • Karma: +1/-0
    • View Profile
Re: MBG system-manager webUI disable for external interface
« Reply #2 on: March 05, 2024, 04:23:38 PM »
Thank you, we hadn't found that.
However it is disabled, and it is starting to look like our firewall might be forwarding to the LAN side.

Appreciate the reply.

Offline lundah

  • Global Moderator
  • Hero Member
  • *****
  • Posts: 1215
  • Country: us
  • Karma: +66/-0
  • Senior Chief Grunt
    • View Profile
Re: MBG system-manager webUI disable for external interface
« Reply #3 on: March 06, 2024, 08:58:22 AM »
Thank you, we hadn't found that.
However it is disabled, and it is starting to look like our firewall might be forwarding to the LAN side.

Appreciate the reply.

Depending on the specific deployment configuration, I could see how that could happen, particularly with some DMZ deployments. In that same screen you could leave remote access enabled and then restrict it to specific netblocks.


 

Sitemap 1 2 3 4 5 6 7 8 9 10