LEGRAND Raritan SRC-0100, User Manual

Page: 210 / 698

Chapter 6: Using the Web Interface
198
Submenu command Refer to
Server Advertising
Enabling Service Advertising
(on page 207)
Important: Raritan uses TLS instead of SSL 3.0 due to published
security vulnerabilities in SSL 3.0. Make sure your network
infrastructure, such as LDAP and mail services, uses TLS rather
than SSL 3.0.
Changing HTTP(S) Settings
HTTPS uses Transport Layer Security (TLS) technology to encrypt all
traffic to and from the SRC so it is a more secure protocol than HTTP.
SRC disables TLS
1.0 and 1.1 by default. It enables only TLS 1.2 and 1.3.
By default, any access to the SRC via HTTP is automatically redirected to
HTTPS. You can disable this redirection if needed.
To change HTTP or HTTPS port settings:
1. Choose Device Settings > Network Services > HTTP.
2. Enable either or both protocols by selecting the corresponding
'Enable' checkbox.
3. To use a different port for HTTP or HTTPS, type a new port number.
Warning: Different network services cannot share the same TCP
port.
4. To redirect the HTTP access to the SRC to HTTPS, select the
"Redirect HTTP connections to HTTPS."

The redirection checkbox is configurable only when both HTTP
and HTTPS have been enabled.
Special note for AES ciphers:
The SRC device's TLS-based protocols support AES 128- and 256-bit
ciphers. The exact cipher to use is negotiated between SRC and the client
(such as a web browser), which is impacted by the cipher priority of SRC
and the client's cipher availability/settings.
Tip: To force SRC to use a specific AES cipher, refer to your client's user
documentation for information on configuring AES settings. For example,
you can enable a cipher and disable the other in the Firefox via the
"about:config" command.