NETGEAR is aware of a growing number of phone and online scams. To learn how to stay safe click here.
Forum Discussion
XS728T - Disable HTTP Access?
Hi all, I attempted to look through both previous posts, as well as the manual, but with no luck I was hoping someone could let me know whether or not it is possible to completely disable HTT...
There is no control to disable the http access indeed.
Newly released switches from the Smart Managed Pro series have got a control which allows to enabled/disable http individually.
"Warning: If you disable HTTP and a problem occurs with the HTTPS certificate of the switch, you might not be able to access the switch UI. In this case, you must reset the switch to factory default settings to regain access to the UI."
YeZ is here a way to ensure the http enable/disable control will become available on earlier models, eg. along with other updates/security fixes, too?
schumaku Understood. Am I correct in assuming that I could create an ACL denying http in/out in order to achive this?
- Di you have an security audit rewiring the restriction or us this just a nice to have? I would be careful banging this door completely.
schumakuThis switch is a temporary solution, and our security audit team will be banging down the door to make sure HTTP is not accessible for this switch. While we do completely understand the risks of disabling HTTP, if we cannot simply turn off HTTP, then we will set up an ACL to disable HTTP access unless you are telling me that isn't a possibility.
The risk does not really exist if the policy is using https - easy mitigation. 8-)
if its a temporary thing, they will survive and allow an exception anyway.
NETGEAR Academy
Boost your skills with the Netgear Academy - Get trained, certified and stay ahead with the latest Netgear technology!
Join Us!
