topic How to disable port http/s connection of Zone Director? in Community and Online Support Services

How to disable port http/s connection of Zone Director?

alvinp — Tue, 21 Jul 2015 06:16:49 GMT

Hi,

Anyone know how to disable port http/s connection of Zone Director? But the access still can be opened using webUI or SSH connection in RDP remote Desktop?

The effort I have already tried is using mgmt_acl.
But when i tried to open my WebUI ZD outside rdp, the http/s port is still open.

PORT STATE SERVICE
21/tcp open ftp
22/tcp filtered ssh
23/tcp filtered telnet
80/tcp open http
443/tcp open https
1812/tcp open radius
9998/tcp open distinct32
9999/tcp open abyss
MAC Address: 00:22:7F:3D:BD:80 (Ruckus Wireless)

Anyone could give me an enlightenment?

legend:
ZD1000 version 9.3.4.0.21

Thanks

Re: How to disable port http/s connection of Zone Director?

michael_brado — Tue, 21 Jul 2015 16:52:34 GMT

Hi Alvin,

I'm sorry, but for security reasons, controllers only permit HTTPS or SSH secure access methods.
You can enable/disable HTTP or Telnet in addition to default HTTPS/SSH on standalone APs, but not
our controller products.

Re: How to disable port http/s connection of Zone Director?

alvinp — Thu, 05 Nov 2015 06:11:26 GMT

Hi michael,

For this matter, it's already been solved by using ACL in switch port which ZD connected.

Yes, https is still available but now it can be looked up only from corresponding IP address of my remote machine.

Thanks.

Re: How to disable port http/s connection of Zone Director?

seanmuir — Thu, 05 Nov 2015 08:55:09 GMT

Anyone know how to disable port http/s connection of Zone Director? But the access still can be opened using webUI or SSH connection in RDP remote Desktop?

Why is this a requirement and what are you trying to achieve?

Re: How to disable port http/s connection of Zone Director?

alvinp — Wed, 11 Nov 2015 06:44:32 GMT

vulnerability on SSL