F5 FirePass, Administrator'S Manual

Page: 81 / 182

Setting Up FirePass Server Security
FirePass
™
Server Administrator Guide 3 - 35
Limiting access to the administrative console by IP
address
To increase the security of the FirePass server, you can limit access to the
Administrative Console by source IP address and/or subnets. Your current
browser’s source IP address is always allowed in order to protect you from
accidentally locking the server.
To limit access to the Administrative Console by IP address
1. Under the Server tab on the left side of the Administrative Console,
click the Security link.
2. Click the Access by IP link.
The Limit IP Access screen opens.
3. In the Option 1 text box, enter the IP addresses or subnets you want
to allow access to. Separate addresses in the list with a blank space.
Use the format xxx.yyy.zzz.www for an explicit address, or
xxx.yyy.zzz.www/vv for an address/mask. You can also use this
alternative form for a subnet: xxx.yyy.zzz. For example:
192.168.2.1 192.168.2.3
192.168.2.1/16
192.168.2
4. Click the Go button next to the Option 1 text box.
5. If you want to allow unlimited access to all IP addresses again, click
the Go button next to the Option 2 text box.
What’s next?
Now that FirePass server security is set up, you are ready to use the
Administrative Console to finish the remaining configuration tasks:
• Configure the Webifyers that you want to make available to users. For
example, configure the SSL VPN Webifyer, if necessary. For more
information, see Chapter 4, Configuring the FirePass Webifyers.
• (Optional) If necessary, customize the appearance of the user’s home
panel, such as the logo and terms used for logging in. For more
information, see Customizing the user’s home page, on page 5-31.