Forum Discussion

Tetsuyoshi's avatar
Tetsuyoshi
Icon for Joining the Conversation rankJoining the Conversation
21 days ago

Any method to disable management access to the Web UI from the LAN

I would like to restrict management access to the Socket Web UI from the LAN. However, in a post from about a year ago, no solution was provided. Is there a way to restrict access to the WebUI? |...
Nath's avatar
Nath
Icon for Finding a Voice rankFinding a Voice
5 days ago

We originally tried blocking the socket LAN IP address on the WAN FW, but that stopped DHCP forwarding working.

What we've done instead is create a custom category for all the socket LAN IPs.  For HA sites, that includes the IPs for the socket, and also the VIP - so 3 entries.

We use the Custom Service object type within the custom category, write the socket name and IP.

We then use this custom category in a WAN FW rule to block all access apart from authorised users.

It works well for us.