NETGEAR is aware of a growing number of phone and online scams. To learn how to stay safe click here.
Forum Discussion
Oh_Drother
Jan 07, 2021Aspirant
XS728T - Disable HTTP Access?
Hi all,
I attempted to look through both previous posts, as well as the manual, but with no luck
I was hoping someone could let me know whether or not it is possible to completely disable HTTP configuration access for managing this XS728T switch, so that only HTTPS is used. I have successfully enabled HTTPS, and can successfully log in with HTTPS, but I cannot figure out how to turn off HTTP. I had thought that by going to Security->Authentication List->httpList and setting the first entry to None would disallow HTTP, but unfortunately it had no effect.
Please let me know if there is any easy way to do this, or if the only option would be create an ACL denying all HTTP both in/out.
Thanks!
5 Replies
- schumakuGuru - Experienced User
There is no control to disable the http access indeed.
Newly released switches from the Smart Managed Pro series have got a control which allows to enabled/disable http individually.
"Warning: If you disable HTTP and a problem occurs with the HTTPS certificate of the switch, you might not be able to access the switch UI. In this case, you must reset the switch to factory default settings to regain access to the UI."
YeZ is here a way to ensure the http enable/disable control will become available on earlier models, eg. along with other updates/security fixes, too?
- Oh_DrotherAspirant
schumaku Understood. Am I correct in assuming that I could create an ACL denying http in/out in order to achive this?
- schumakuGuru - Experienced UserDi you have an security audit rewiring the restriction or us this just a nice to have? I would be careful banging this door completely.
Related Content
NETGEAR Academy
Boost your skills with the Netgear Academy - Get trained, certified and stay ahead with the latest Netgear technology!
Join Us!