Blue Coat SG510 Series, Руководство по установке

Страница: 80 / 110

P/N 231-02833 Blue Coat SG510 Installation Guide page 80
Verify the address and port using the CLI through the Serial Console, and
display the network configuration. For information on how to do this, see
“Initial Configuration Using a Direct Serial Port Connection” on page 38.
• Verify that the workstation is configured and working properly by
connecting to other Web sites. This test might fail if your browser is
configured to use the SG510 as a proxy server and there is a problem with the
SG510.
• If accessing a SG510 located on a remote network (any segment other than the
segment to which the workstation is attached), verify that other servers on
that network are accessible.
• Ping the IP address to verify that the SG510 is accessible from the
workstation. If the SG510 does not respond to the ping, verify that the SG510
is operational (as described earlier).
A Security Warning Appears for the Initial
Configuration Web Page
When you open the Initial Configuration page, a security warning dialog appears.
This warning indicates that the SG510 credentials could not be verified by a
known certificate authority (such as VeriSign®). This is because the SG510
dynamically generated the self-signed credentials at the time of the last factory
reset—they are not registered with a known certificate authority.
Normally, accepting such a credential represents a security risk because of the
possibility of a man-in-the-middle attack. However, when you have connected
your PC directly to the SG510, as described in this guide, a man-in-the-middle
attack is impossible. The SG510 has not yet been configured and is connected
directly to your PC. The Initial Configuration Web page is accessible only through
a SG510 that has not yet been configured.
You can verify that the serial number in the credential matches the serial number
printed on the SG510 if you want to be absolutely certain that you have connected
to the correct device.
The SG510 certificate is no longer valid
If you move the SG510 from its original location or change the IP address for any
reason, the SG510’s security certificate might not be accepted the next time you
open the Management Console.