Symantec Security 5600 Series, Security 5400 Series,Clientless VPN 4400 Series, Administration Manual

Page: 74 / 861

74 Managing administrative access
Enabling SSH for command-line access to the appliance
Changing a machine account password
If you are logged on to the SGMI with write privileges, you can change the password of machine
accounts. When changing machine account passwords, you must save and activate the changes to
make them take effect.
Prerequisites
Complete the following task before beginning this procedure:
■
“Creating machine accounts for security gateway access from remote computers” on page 69
To change a machine account password
1 In the SGMI, in the left pane, under System, click Administration .
2
In the right pane, on the Machine Accounts tab, highlight the account with the password that you
want to change, and then click
Properties .
3 In the Machine Account Properties dialog box, on the General tab, in the Password text box, type
the new password.
It must be at least 10 characters long and contain numerals, both uppercase and lowercase
alphabetic characters, and symbols.
The password is encrypted and appears as a string of asterisk (*) characters.
4
In the Confirm Password text box, type the password again.
5 Optionally, do one of the following:
■
To save your configuration now and activate later, on the toolbar, click Save .
■
To activate your configuration now, on the toolbar, click Activate .
When prompted to save your changes, click Yes .
Related information
For further information related to this topic, see the following:
■
“Machine Account Properties—General tab” on page 764
Enabling SSH for command-line access to the appliance
There may be times when you need to work directly on the security gateway. For example, you connect
to the appliance to configure multicast support for gateway to gateway IPsec tunnels. You can also
connect to the appliance as an alternate way to perform a backup, or to retrieve an upgrade report.
In addition, Symantec Technical Support may ask you to view or change a configuration that is not
accessible through the SGMI.
You can use a Standard Secure Shell (SSH) client to establish a connection to the appliance so that you
can enter commands. SSH is a high-security protocol that uses strong cryptography to protect your
connection against eavesdropping, hijacking, and other attacks.
When you log on using SSH, you use the root password.
Prerequisites
None.
To enable command-line access to the appliance
1
In the SGMI, in the left pane, under System, click Configuration .