Firewall
69
Administration services
The following figure shows the Administration Services page:
Figure 6-1
By default the CyberGuard SG appliance runs a web administration server and a telnet
service. Access to these services can be restricted to specific interfaces. For example,
you may want to restrict access to the Web Management Console web administration
pages (Web Admin) to machines on your local network. Disallowing all services is not
recommended, as this will make future configuration changes impossible unless your
CyberGuard SG appliance is reset to the factory default settings.
You can also select to accept ICMP messages on the Internet port. For example, if you
disallow echo requests (the default for increased security), your CyberGuard SG
appliance will not respond to pings on its Internet port. Destination unreachable ICMP
messages are always accepted.