NETGEAR is aware of a growing number of phone and online scams. To learn how to stay safe click here.
Forum Discussion
Solved
Disable HTTP on ReadyNAS 212
Need to disable HTTP on ReadyNAS 212. HTTPS is activated, but can use both http or https to log onto admin console. Need to disable http for PCI security reasons. Is it even possible?
capthook2002 wrote:
Need to disable HTTP on ReadyNAS 212. HTTPS is activated, but can use both http or https to log onto admin console. Need to disable http for PCI security reasons. Is it even possible?
It's not possible to block http, but you can ensure that the admin web ui is restriced to https. Just look at the http settings in system->settings->services.
3 Replies
capthook2002 wrote:
Need to disable HTTP on ReadyNAS 212. HTTPS is activated, but can use both http or https to log onto admin console. Need to disable http for PCI security reasons. Is it even possible?
It's not possible to block http, but you can ensure that the admin web ui is restriced to https. Just look at the http settings in system->settings->services.
Under HTTP service is option to check or uncheck "Enable HTTP admin". This has been unchecked since we installed the device a couple years ago. However I just assumed it didnt allow http and I have always connected with https. I am able to log in at http://NAS_IPorNAME or https://NAS_IPorNAME. I confirmed by watching packets fly to device on port 80 when using the http address, and 443 when using https.
I checked the option and rebooted, then unchecked and rebooted, and now using http redirects to https. On a second device, I skipped the reboots, just checked and applied, then unchecked and applied and now http redirects to https.
I am going to assume that either this is a bug with firmware updates or just the most recent 6.10.1. I will be checking on next firmware upgrade if need to perform this sequence again.
Had a few systems on 6.10.0 HF2 ... made sure could not connect via http .... upgraded ... made sure could not connect via http
So i am going to assume that option was invisibly checked during some upgrade prior as a bug and all good now when upgrading
NETGEAR Academy
Boost your skills with the Netgear Academy - Get trained, certified and stay ahead with the latest Netgear technology!
Join Us!
