Eicon Networks SHIVA 1100, Руководство администратора, Страница: 46 / 136

Incoming access
46 System Administrator’s Guide
Incoming access
The Incoming Access section allows you to control access to the Shiva VPN Gateway
itself, e.g. for remote administration. Click
Incoming Access on the Firewall menu to
show the Incoming Access configuration page which has two tabs: Administration
Services and Shiva Web Server.
Administration services
The following figure shows the Administration Services page:
By default the Shiva VPN Gateway runs a web administration server and a telnet
service. Access to these services can be restricted to specific interfaces. For example,
you generally want to restrict access to the Web Management Console web
administration pages (Web Admin) to machines on your local network. Disallowing all
services is not recommended, as this will make future configuration changes
impossible unless your Shiva VPN Gateway is reset to the factory default settings.
Warning: If you do want to allow administrative access on interfaces other than the
LAN, there are several security precautions you should take. See the note in the
next section for details.
You can also select to accept ICMP messages on the Internet port. For example, if
you disallow echo requests (the default for increased security), your Shiva VPN
Gateway will not respond to pings on its Internet port. Destination unreachable ICMP
messages are always accepted.