Raritan Dominion KX II-101-V2, Руководство пользователя

Страница: 147 / 213

Chapter 8: Security Management
139
FIPS 140-2 Support Requirements
The KX II-101-V2 supports the use of FIPS 140-2 approved encryption
algorithms. This allows an SSL server and client to successfully
negotiate the cipher suite used for the encrypted session when a client is
configured for FIPS 140-2 only mode.
Following are the recommendations for using FIPS 140-2 with the KX II-
101-V2:
KX II-101-V2

Set the Encryption & Share to Auto on the Security Settings page.
See Encryption & Share.
Microsoft Client

FIPS 140-2 should be enabled on the client computer and in Internet
Explorer.
To enable FIPS 140-2 on a Windows client:
1. Select Control Panel > Administrative Tools > Local Security Policy
to open the Local Security Settings dialog.
2. From the navigation tree, select Select Local Policies > Security
Options.
3. Enable "System Cryptography: Use FIPS compliant algorithms for
encryption, hashing and signing".
4. Reboot the client computer.
To enable FIPS 140-2 in Internet Explorer:
1. In Internet Explorer, select Tools > Internet Options and click on the
Advanced tab.
2. Select the Use TLS 1.0 checkbox.
3. Restart the browser.
Configuring IP Access Control
Using IP access control, you can control access to your KX II-101-V2. By
setting a global Access Control List (ACL) you are by ensuring that your
device does not respond to packets being sent from disallowed IP
addresses.
Important: IP address 127.0.0.1 is used by the KX II-101-V2 local
port. When creating an IP Access Control list, if 127.0.0.1 is within
the range of IP addresses that are blocked, you will not have access
to the KX II-101-V2 local port.