HP TippingPoint Next Generation Firewall Series Guide de l'utilisateur télécharger pdf (Page 54)

44 SMS Attributes and Objects

svc

Collection of attribs used to enable various services that execute within the system. While the system

implements an internal firewall to protect against attacks, further security can be implemented by disabling

unneeded services.

Related Commands

ntp, snmp, pwd

Table 3-21 svc Attributes

Attribute Description Type Access Range

svc.fips-enable

Attribute used to enable/disable SMS FIPS

mode. In this mode, only FIPS 140-2

approved cryptographic algorithms are

used when allowing SSH connections.

NOTE: FIPS mode cannot be enabled if SSH

has not been enabled. Also, disabling SSH

automatically disables FIPS mode.

Example:

set svc.fips-enable=yes

Bool read-write 0

svc.http-enable

Attribute used to enable/disable the HTTP

(HTTP protocol) service.

The HTTP service is used to download the

SMS client during the installation process

and download other files. The service is

configured to prevent CGI and other active

server processing. Once the client is

downloaded, the service can be disabled

until an updated client is available. HTTP

and HTTPS can be enabled separately.

To enable HTTP, set the svc.http-enable

attrib to true. To disable, set to false.

Example:

set svc.http-enable=true

Bool read-write 0

svc.https-enable

Attribute used to enable/disable the HTTPS

(Secure HTTP protocol) service.

The HTTPS service is used to download the

SMS client during the installation process.

The service is configured to prevent CGI

and other active server processing. Once

the client is downloaded, the service can be

disabled until an updated client is available.

To enable HTTPS, set the

svc.https-enable

attrib to true. To disable, set to false.

Bool read-write 0

svc.ping-enable

Attribute used to enable/disable incoming

ping support. Responding to pings can be

considered a security weakness for systems.

When disabled, the SMS will not respond to

ICMP Echo Requests.

Example:

set svc.ping-enable=true

Bool read-write 0

1 2 ... 49 50 51 52 53 54 55 56 57 58

Commentaires sur ces manuels

Pas de commentaire

HP TippingPoint Next Generation Firewall Series Guide de l'utilisateur Page 54

Commentaires sur ces manuels

Produits connexes et manuels pour Mise en réseau HP TippingPoint Next Generation Firewall Series