ADDER CATx User Manual

Also see for AdderView CATx AVX4016: User guide

Contents

ADDER CATx User Manual Manual pdf 43 page image

 42Placing AdderView CATx IP alongside the firewallAdderView CATx IP is built from the ground-up to be secure. It employs asophisticated 128bit public/private key system that has been rigorously analysedand found to be highly secure (a security white paper is available upon requestfrom Adder Technology Ltd). Therefore, you can position the AdderView CATxIP alongside the firewall and control hosts that are also IP connected within thelocal network.IMPORTANT: If you make the AdderView CATx IP accessible from the publicInternet or from a modem, care should be taken to ensure that the maximumsecurity available is activated. You are strongly advised to enable encryption anduse a strong password. Security may be further improved by restricting clientIP addresses, using a non-standard port number for access or limiting remoteaccess to dial up connections only.Ensuring sufficient securityThe security capabilities offered by the AdderView CATx IP are only truly effectivewhen they are correctly used. An open or weak password or unencrypted linkcan cause security loopholes and opportunities for potential intruders. Fornetwork links in general and direct Internet connections in particular, you shouldcarefully consider and implement the following:• Ensure that encryption is enabled.By standard configuration menu or by configuration page via viewer.• Ensure that you have selected secure passwords with at least 8 charactersand a mixture of upper and lower case and numeric characters.By configuration page via viewer.• Reserve the admin password for administration use only and use a non-admin user profile for day-to-day access.• Use the latest Secure VNC viewer (this has more in-built security than isavailable with the Java viewer). To download the viewer.• Use non-standard port numbers.• Restrict the range of IP addresses that are allowed to access the AdderViewCATx IP to only those that you will need to use. To restrict IP access.• Do NOT Force VNC protocol 3.3. Configuration page via viewer.• Add a further level of inherent security by restricting access only via modemor ISDN dialup.• Ensure that the computer accessing the AdderView CATx IP is clean ofviruses and spyware and has up-to-date firewall and anti-virus softwareloaded that is appropriately configured.• Avoid accessing the AdderView CATx IP from public computers.Security can be further improved by using the following suggestions:• Place the AdderView CATx IP behind a firewall and use the port numbers toroute the VNC network traffic to an internal IP address.• Review the activity log from time to time to check for unauthorised use.• Lock your server consoles after they have been used.A security white paper that gives further details is available upon request fromAdder Technology Limited.PortsIn this configuration there should be no constraints on the port numbersbecause the AdderView CATx IP will probably be the only device at that IPaddress. Therefore, maintain the HTTP port as 80 and the VNC port as 5900.AddressingWhen the AdderView CATx IP is situated alongside the firewall, it will require apublic static IP address (i.e. one provided by your Internet service provider).More addressing information:Discover DHCP-allocated addressesDNS addressing