MBG system-manager webUI disable for external interface

[mitelrvtd]

We are able to access the Server-Manager WebUI login screen from the external interface of our MBGs.

The external IP address is not listed in Trusted Networks, just the LAN side IP.

I thought we had this disabled in the past but we are not sure how to disable the external access.

Thank you

[lundah]

Go to Remote Proxy -> Domain List, edit your domain. Towards the bottom of the settings, make sure the checkbox for "Do you wish to permit remote administrative access?" is unchecked to disable admin access from the WAN side.

[mitelrvtd]

Thank you, we hadn't found that.
However it is disabled, and it is starting to look like our firewall might be forwarding to the LAN side.

Appreciate the reply.

[lundah]

Thank you, we hadn't found that.
However it is disabled, and it is starting to look like our firewall might be forwarding to the LAN side.

Appreciate the reply.

Depending on the specific deployment configuration, I could see how that could happen, particularly with some DMZ deployments. In that same screen you could leave remote access enabled and then restrict it to specific netblocks.