Blue Coat SG810 series, Installation Manual

Page: 43 / 110

P/N 231-02941 SG810 Installation Guide page 43
9
(Optional) On page 3, you might restrict the use of the console account to a
specific workstation. On this screen, you can add one IP address to the list of
authorized workstations that are approved to use the console account.
Additional workstations maybe configured later using the CLI or through the
Management Console.
Figure 2-7: Setup Console—Page Three
--
-------------------- (page 3 of 5) ---------------------
Press <ESC> at any time to return to the main menu
DIRECTIONS:
The console username and password are special. They can be used
to log in to the CLI or Web Management interface even in
circumstances where this is denied by VPM or CPL policy.
This makes the console account useful in emergencies, as a way
to log in when policy is broken, but it may also create a
security hole.
To close the security hole, we recommend that you restrict the
use of the console account to specific workstations, identified
by their IP address.
This dialog allows you to add one IP address to the list of
workstations that are authorized to use the console account.
(This same list is also used to restrict which workstations can
use SSH with RSA authentication.)
Additional workstations may be configured later from the command
line interface or the Web interface.
WARNING: The console account can currently be used to log in
from any workstation.
Would you like to restrict access to an authorized workstation?
Y/N [Yes] Yes
Authorized workstation [0.0.0.0]: 10.2.33.1