M86 Security SWG, Setup Manual

Page: 17 / 27

C
HAPTER
4: P
ERFORMING
A
DDITIONAL
C
ONFIGURATION
(O
PTIONAL
)
M86 S
ECURITY
SWG S
ETUP
G
UIDE V
. 10.2 17
Limited Shell Configuration Commands
Limited Shell configuration commands enable you to define the role
the appliance takes, the security, access and time settings, and also
carry out routine maintenance operations. The configuration
commands are also used to define how the network works, and how
the appliance communicates with the network.
access_list
This feature is configured from the Management Console. The
administrator can define a range of IP addresses to access
Management applications on predefined ports (such as the
Management Console, SNMP, SSH) or User applications on
predefined ports (such as HTTP, FTP, ICAP) or System ports
(internal ports). Any IP address not defined in the IP range will then
be blocked from accessing these applications on the ports defined
by M86 Security.
The access_list command is used to enable or disable the Access
List and is useful for situations when due to a mistaken
configuration, or other circumstances, you cannot access the
Management Console, and want to disable the Access List feature.
Enter the access_list command and choose enable or disable.
change_password
Allows system administrators to change the Limited Shell’s
password. For security reasons, it is recommended to choose a
password which contains both characters (higher case and lower
case) and digits. It is also recommended to change the password
frequently.
Enter the change_password command and confirm current and
new passwords.