Raritan PMC-1000, User Manual

Page: 205 / 621

Chapter 3: Using the Web Interface
193
Submenu command Refer to
Service Advertising
Enabling Service Advertising
(on page 200)
Important: Raritan uses TLS instead of SSL 3.0 due to published
security vulnerabilities in SSL 3.0. Make sure your network
infrastructure, such as LDAP and mail services, uses TLS rather than
SSL 3.0.
Changing HTTP(S) Settings
HTTPS uses Transport Layer Security (TLS) technology to encrypt all
traffic to and from the BCM2 so it is a more secure protocol than HTTP.
The BCM2 supports TLS
1.0, 1.1 and 1.2.
By default, any access to the BCM2 via HTTP is automatically redirected
to HTTPS. You can disable this redirection if needed.
To change HTTP or HTTPS port settings:
1. Choose Device Settings > Network Services > HTTP.
2. Enable either or both protocols by selecting the corresponding
'Enable' checkbox.
3. To use a different port for HTTP or HTTPS, type a new port number.
Warning: Different network services cannot share the same TCP
port.
4. To redirect the HTTP access to the BCM2 to HTTPS, select the
"Redirect HTTP connections to HTTPS."

The redirection checkbox is configurable only when both HTTP
and HTTPS have been enabled.
Special note for AES ciphers:
The BCM2 device's SSL/TLS-based protocols, including HTTPS, support
AES 128- and 256-bit ciphers. The exact cipher to use is negotiated
between the BCM2 and the client (such as a web browser), which is
impacted by the cipher priority of the BCM2 and the client's cipher
availability/settings.
Tip: If intending to force the BCM2 to use a specific AES cipher, refer to
your client's user documentation for information on configuring AES
settings. For example, you can enable a cipher and disable the other in
the Firefox via the "about:config" command.