Remote Access

You can manage access control to the appliance in the Remote Access page.

Active firewall rules

Most of the active firewall rules are read-only and cannot be changed on this page. They are a result of the configuration in other sections of the Configuration Center. Typically:

• System > Management Interface 1 (for DHCPv6)
• System > Time Zone (for NTP)
• System > SNMP (for SNMP)
• System > Syslog Server (for Syslog)
• Monitoring Center > Listening Ports (for NetFlow/IPFIX listening ports)

HTTP and HTTPS rules are always active. ICMP and SSH rules are active by default, but can be disabled.

Access restriction settings

In the Access restriction settings panel, you can choose which IP addresses can access the appliance using the HTTP, HTTPS, and SSH protocols. To have access to the appliance:

• The list of access restrictions must be empty, or
• Your host IP address must be listed, or
• Your host IP address must belong to one of the listed (sub)network IP addresses.

Every access restriction entry specifies a host IP address or a (sub)network IP address that is allowed to access the Flowmon appliance. By default, these settings only apply to the HTTP and HTTPS protocols. If you want to connect to the appliance using the SSH protocol, the SSH switch must be set to ACCEPT in the Active firewall rules section too.

You can edit or delete restrictions using Edit and Delete actions. Click New IP address or subnet to add a new restriction. Restricting both IPv4 and IPv6 addresses and their (sub)networks is supported.

Other protocols (ICMP, SNMP, and so on) are not affected by access restriction settings.