Dell PowerConnect J-SRX100, Руководство по оборудованию, Страница: 95 / 158

d.
Scroll down to the Interfaces Configuration panel on the page to add an interface
to a specific zone.
e.
Click OK to save the configuration.
6.
Configure basic security policies.
a.
In the J-Web interface, under the Configure tab, navigate to Security > Policy .
b.
In the Security Policy page, click Add .
c.
Enter a name for the policy and select the source and destination zones.
d.
Enter a source address, destination address, and an application.
e.
Select Policy Action as
Permit
, or
Deny
, or
Reject
.
f.
Click OK to save the configuration.
NOTE: Click Commit to apply the configuration and other pending changes
(if any) and click Discard to discard pending changes.
For more instructions on managing users and operations, monitoring network performance,
upgrading software, and diagnosing common problems on a J-SRX100 Series Services
Gateway, see the
Junos OS Administration Guide .
J-SRX100 Services Gateway Secure Web Access Overview
You can manage a services gateway remotely through the J-Web interface. To
communicate with the services gateway, the J-Web interface uses Hypertext Transfer
Protocol (HTTP). HTTP allows easy Web access but no encryption. The data that is
transmitted between the Web browser and the services gateway by means of HTTP is
vulnerable to interception and attack. To enable secure Web access, the services gateway
supports HTTP over Secure Sockets Layer (HTTPS). You can enable HTTP or HTTPS
access on specific interfaces and ports as needed.
The services gateway uses the SSL protocol to provide secure management of services
gateways through the J-Web. SSL uses public-private key technology that requires a
paired private key and an authentication certificate for providing the SSL service. SSL
encrypts communication between your device and the Web browser with a session key
negotiated by the SSL server certificate.
An SSL certificate includes identifying information such as a public key and a signature
made by a certificate authority (CA). When you access the services gateway through
HTTPS, an SSL handshake authenticates the server and the client and begins a secure
session. If the information does not match or if the certificate has expired, your access
to the services gateway through HTTPS is restricted.
81
Chapter 13: Performing Initial Software Configuration on the J-SRX100 Services Gateway