Chapter 9: Security Management185Checking Your Browser for AES EncryptionThe Dominion KX II supports AES-256. If you do not know if yourbrowser uses AES, check with the browser manufacturer or navigate tothe https://www.fortify.net/sslcheck.html website using the browser withthe encryption method you want to check. This website detects yourbrowser's encryption method and displays a report.Note: IE6 does not support AES 128 or 256-bit encryption.AES 256 Prerequisites and Supported ConfigurationsAES 256-bit encryption is supported on the following web browsers only:• Firefox 2.0.0.x• Mozilla 1.7.13• Internet Explorer 7In addition to browser support, AES 256-bit encryption requires theinstallation of Java Cryptography Extension (JCE) Unlimited StrengthJurisdiction Policy Files.Jurisdiction files for various JRE's are available at the “other downloads”section of the following link:• JRE1.5 - http://java.sun.com/javase/downloads/index_jdk5.jspConfiguring IP Access ControlUsing IP access control, you can control access to your Dominion KX II.By setting a global Access Control List (ACL) you are by ensuring thatyour device does not respond to packets being sent from disallowed IPaddresses. The IP access control is global, affecting the Dominion KX IIas a whole, but you can also control access to your device at the grouplevel. See Group-Based IP ACL (Access Control List) (on page 101)for more information about group-level control.Important: IP address 127.0.0.1 is used by the Dominion KX II localport. When creating an IP Access Control list, 127.0.0.1 is used bythe Dominion KX II and should not be within the range of IPaddresses that are blocked; you will not have access to theDominion KX II local port.To use IP access control:1. Open the IP Access Control page by selecting Security > IP AccessControl. The IP Access Control page opens.2. Select the Enable IP Access Control checkbox to enable IP accesscontrol and the remaining fields on the page.
