Enabling Management Service Options for Interfaces
Enable management service options for the interface as described in Table 1.
Table 1: Management Service Options
Service Options | Your Action |
|---|---|
Web | Select this option to enable the interface to receive HTTP traffic for management from the Web UI. |
Telnet | Select this option to enable Telnet manageability. A terminal emulation program for TCP/IP networks such as the Internet, Telnet is a common way to remotely control network devices. |
SSH | Administer the security device from an Ethernet connection or a dial-in modem using SSH. You must have an SSH client that is compatible SSHv1.5. These clients are available for Windows 95 and later, Windows NT, Linux, and UNIX. The security device communicates with the SSH client through its built-in SSH server, which provides device configuration and management services. Selecting this option enables SSH manageability. |
SNMP | Select this option to enable SNMP manageability. The security device supports both SNMPv1 and SNMPv2c, and all relevant Management Information Base II (MIB II) groups, as defined in RFC1213. |
SSL | Select this option to enable the interface to receive HTTPS traffic for secure management of the security device using the Web UI. Additionally, when this option is enabled, you can also require WebAuth users to use SSL when connecting to the WebAuth IP address on a device running ScreenOS 5.1 and later. |
Global Pro (Security Manager) | Select this option to enable the interface to receive NSM traffic. |
Ping | Select this option to enable the interface to respond to an ICMP echo request, or ping, which determines whether a specific IP address is accessible over the network. |
Ident-Reset | Select this option to restore access that has been blocked by an unacknowledged identification request. Services like Mail and FTP send identification requests. If they receive no acknowledgement, they send the request again. While the request is processing, there is no user access. The Ident-reset option sends a TCP reset announcement in response to an IDENT request to port 113. |
NSGP | Select this option to enable the interface to handle NSGP traffic. When enabled, you can also select to enforce IPsec authentication for NSGP traffic. |