Remote Access

You can manage access control to the appliance in the Remote Access page.

Active firewall rules

Most of the active firewall rules are read-only and cannot be changed on this page. They are a result of the configuration in other sections of the Configuration Center. Typically:

• System > Management Interface 1 (for DHCPv6)
• System > Time Zone (for NTP)
• System > SNMP (for SNMP)
• System > Syslog Server (for Syslog)
• Monitoring Center > Listening Ports (for NetFlow/IPFIX listening ports)

HTTP and HTTPS rules are always active. ICMP and SSH rules are active by default, but can be disabled.

Access restriction settings

In the Access restriction settings panel, you can choose which IP addresses can access the appliance using the HTTP, HTTPS, and SSH protocols. To have access to the appliance:

• The list of access restrictions must be empty, or
• Your host IP address must be listed, or
• Your host IP address must belong to one of the listed (sub)network IP addresses.

Every access restriction entry specifies a host IP address or a (sub)network IP address that is allowed to access the Flowmon appliance. By default, these settings apply to HTTP and HTTPS. If you want to connect to the appliance using the SSH protocol, the SSH switch must be set to ACCEPT in the Active firewall rules section too.

When access restrictions are active, ICMP traffic from listed IP addresses or subnets is allowed, regardless of the global ICMP rule.

You can edit or delete restrictions using Edit and Delete actions. Click New IP address or subnet to add a new restriction. Restricting both IPv4 and IPv6 addresses and their (sub)networks is supported.

Other protocols, such as SNMP, are not affected by access restriction settings.