MA-025
–
DGA 900 Operator Guide
–
Rev 2.0
12-Apr-19
Page 72 of 92
In the Upload certificate field, click the
Select file
button, select the new certificate
(PEM file) and click
Open
.
▪
Click the
‘
Save
’
button
in the application header to apply the changes.
▪
Restart the DGA 900.
Note:
If HTTPS is disabled, the certificate will be applied when HTTPS is enabled.
A.4
Software Firewall
The DGA 900 has a built-in firewall that defines the security settings for the various
interfaces. Firewall policies are configured separately for each interface (Ethernet, USB,
GSM-GPRS modem). The DGA 900 ships with a standard GE self-signed certificate with the
firewall enabled by default to accept all HTTP requests. You should customise the firewall.
To create a custom security policy, select
Settings
>
Firewall
to open the Firewall Settings
page as shown in Figure A-3.
Figure A-3: Firewall Settings
Rules can be added, edited or deleted to create a suitable access policy for each type of
interface. These rules are used to block unused ports and specify distinct firewall actions
(accept, reject or drop) based on the IP address or port.
A.4.1
Default Policy
The default policy is to accept all incoming requests and applies for all cases not covered
by specific policies. The default policy provides a dropdown list of three options as shown
in Figure A-4.
