Raritan PX3TS, User Manual

Page: 316 / 842

Chapter 6: Using the Web Interface
292
Submenu command Refer to
Service Advertising
Enabling Service Advertising
(on page 299)
Important: Raritan uses TLS instead of SSL 3.0 due to published
security vulnerabilities in SSL 3.0. Make sure your network
infrastructure, such as LDAP and mail services, uses TLS rather
than SSL 3.0.
Changing HTTP(S) Settings
HTTPS uses Transport Layer Security (TLS) technology to encrypt all
traffic to and from the PX3TS so it is a more secure protocol than HTTP.
The PX3TS supports TLS
1.0, 1.1 and 1.2.
By default, any access to the PX3TS via HTTP is automatically redirected
to HTTPS. You can disable this redirection if needed.
To change HTTP or HTTPS port settings:
1. Choose Device Settings > Network Services > HTTP.
2. Enable either or both protocols by selecting the corresponding
'Enable' checkbox.
3. To use a different port for HTTP or HTTPS, type a new port number.
Warning: Different network services cannot share the same TCP
port.
4. To redirect the HTTP access to the PX3TS to HTTPS, select the
"Redirect HTTP connections to HTTPS."

The redirection checkbox is configurable only when both HTTP
and HTTPS have been enabled.
Special note for AES ciphers:
The PX3TS device's SSL/TLS-based protocols, including HTTPS, support
AES 128- and 256-bit ciphers. The exact cipher to use is negotiated
between the PX3TS and the client (such as a web browser), which is
impacted by the cipher priority of the PX3TS and the client's cipher
availability/settings.
Tip: If intending to force the PX3TS to use a specific AES cipher, refer to
your client's user documentation for information on configuring AES
settings. For example, you can enable a cipher and disable the other in
the Firefox via the "about:config" command.