30
Blue Coat SG200 Series
Figure 2-19: Initial Setup—Secure the Serial Port (Optional)
8
(Optional) On page 4, you can restrict access to the SG200.
Figure 2-20: Initial Setup—Page Four
Page 5 displays. This page explains how to access the SG200 from an SSH Client or with a Web
browser. See
Section E: “Logging on to the SG200
on page 37 for more information.
Note:
For maximum security, restrict physical access to the SG200.
Do you want to secure the serial port? Y/N [Yes]
Y
Enter setup password:
”******”
Verify setup password:
”******”
WARNING:
If you continue and enable the secure serial port it will not be
possible to enter the setup console without the setup password. If
the setup password is lost, assistance from Blue Coat Systems will be
required and all system configuration may be lost. It is recommended
that this password be stored in a physically secure location. Access
to the CLI on the serial port will challenge for credentials.
To enable the secure serial port, re-enter the setup password:
”******”
--------------------- (page 4 of 5) --------------------
Press <ESC> at any time to return to the main menu
DIRECTIONS:
The console username and password are special: they can be used to
log in to the CLI or Web Management interface even in circumstances
where this is denied by VPM or CPL policy. This makes the console
account useful in emergencies, as a way to log in when policy is
broken, but it may also create a security hole.
To close the security hole, we recommend that you restrict the use of
the console account to specific workstations, identified by their IP
address.
This dialog allows you to add one IP address to the list of
workstations that are authorized to use the console account. (This
same list is also used to restrict which workstations can use SSH
with RSA authentication.) Additional workstations may be configured
later, from the command line interface or the Web interface.
WARNING: The console account can currently be used to log in from any
workstation.
Would you like to restrict access to an authorized workstation? Y/N
[Yes]
Y
Authorized workstation [0.0.0.0]:
10.2.33.1
