semaphore TBOX LT2-530 Series, User Manual, Page: 44 / 197

Version : 1.09 44
7.4. IP Security
7.4.1. Firewall
TB
OX
LT2
embeds a Firewall.
Once activated it gives access to exception rules in folder "Resources"

"IP Security"

"Firewall" (see
chapter 11.2).
Once Firewall has been activated, make sure to define rules! In case you activate Firewall
without declaring any rules, all IP access to
TB
OX
LT2
will be blocked.

Doing a global reset, the rules are deactivated while TBox is in stop mode and access restored.

Doing a stop from TWinSoft, the rules stay active, also when sending a program.
7.4.2. HTTPS
HTTPS, with "S" for "secured", is an alternative to HTTP but protected with the use of SSL and TLS
protocols. It provides protection on data when accessing TBox as Web Server.
Certificate and key can be generated using OpenSSL.exe (see chapter 11.1. OpenVPN)
Certificate
When the browser connects to
TB
OX
LT2
using HTTPS, it has to identify the server using a certificate.
Either you don’t have a certificate then you can generate one from TWinSoft. Click “Generate”.
Or you have a certificate, public or private. A public certificate is authenticated by Certified Authorities
like Thawte, Verisign, DigiCert, …
Either you have authenticated a certificate to a Certified Authority and you connect directly to
TB
OX
LT2
or you have created your own certificate and then during the first connection the browser will prompt
you to trust the site. You indicate here the content of the “Server” certificate:
<server>.crt
Key
The key is used to encrypt data. You indicate here the content of the “Server” key: <server>.key
Generate
In case you don't have your own certificate and key, type the button "Generate":
Fill the fields corresponding to your company.
Disable HTTP
To extend protection, HTTP can be disabled; meaning only secure connection will be allowed.