Secure Web Gateway 11.5 Setup Guide
Copyright © 2013 Trustwave Holdings, Inc. All rights reserved.
14
Command
A/C/M
Description
tcpdump
M
Dumps traffic on a network. Results files will be under sftp chroot/
tcpdump_captures. Files can be downloaded using any sftp client
top
M
Displays Linux tasks
traceroute
M
Prints the route packets taken to network host (traceroute
uptime
M
Displays uptime
vmstat
M
Reports information about system usage (usage: vmstat,
w
M
Shows who is logged on
wget
M
Retrieves files using HTTP, HTTPS and FTP
4.2
Limited Shell Configuration Commands
Limited Shell configuration commands enable you to define the role the appliance takes, the security,
access and time settings, and also carry out routine maintenance operations. The configuration
commands are also used to define how the network works, and how the appliance communicates with
the network.
access_list
This feature is configured from the Management Console. The administrator can define a range of IP
addresses to access Management applications on predefined ports (such as the Management Console,
SNMP, SSH) or User applications on predefined ports (such as HTTP, FTP, ICAP) or System ports (internal
ports). Any IP address not defined in the IP range will then be blocked from accessing these applications
on the ports defined by Trustwave.
The access_list command is used to enable or disable the Access List and is useful for situations when
due to a mistaken configuration, or other circumstances, you cannot access the Management Console,
and want to disable the Access List feature.
Enter the access_list command and choose enable or disable.
change_password
Allows system administrators to change the Limited Shell’s password. For security reasons, it is
recommended to choose a password which contains both characters (higher case and lower case) and
digits. It is also recommended to change the password frequently.
Enter the change_password command and confirm current and new passwords.
