Digi ConnectPort X4 User's Guide download pdf (Page 179)

Configuration through the web interface

179

Additional ways to control user access

Disable unused and non-secure network services

Depending on your mobile service provider, other users can access your Digi device device over

the Internet, through various network services enabled on your Digi device. To further secure the

Digi device, network services not necessary to the device, particularly non-secure or un-encrypted

network services such as Telnet, can be disabled. See "Network services settings" on page 64.

Use IP filtering

You can better restrict your device on the network by only allowing certain devices or networks to

connect. This is known as IP filtering or Access Control Lists (ACL). IP filtering configures a Digi

device to accept connections from specific and known IP addresses or networks only, and silently

drop other connections. Digi devices can be filtered on a single IP address or restricted as a group

of devices using a subnet mask that only allows specific networks to access to the device. IP

Filtering settings are a part of the Network configuration settings. See "IP filtering settings" on

page 70.

Important: Plan and review your IP filtering settings before applying them. Incorrect settings can

make the Digi device inaccessible from the network.

Use Network Port Scan Cloaking feature

The Network Port Scan Cloaking feature allows you to configure this Digi device to ignore

(discard) received packets for services that are hidden or not enabled and network ports that are not

open. This feature can be used to protect your Digi device from malicious software or denial of

service attacks. For more information, see "Network Port Scan Cloaking" on page 97.

1 2 ... 174 175 176 177 178 179 180 181 182 183 184 ... 270 271

No comments

Digi ConnectPort X4 User's Guide Page 179