Expressway Dual-NIC: disable administration from LAN2

[Jerome Wintringer]

Hello,

I'm running Expressway in Dual-NIC mode and I would like to block/disable the access to the management interface from LAN 2.

As LAN2 is in the DMZ and we use Jabber Guest, port 443 is open on the firewall but translated to 9443 for Jabber Guest.

We want to make sure that in the case where the translation fails for some reason there is no access to the management interface.

Best Regards

Jerome

[Patrick Sparkman · Accepted solution]

You could use the Expressway's firewall rules to prevent access to the admin interface for any address coming from your DMZ, see System > Protection > Firewall rules.

If you're running Expressway X8.9, you can change the admin interface to use port 445 through the web interface under System > Administration, or to a different port of your choosing using the CLI.

xConfiguration Management Interface Port: ####