Does anyone use HTTPS for the web console.
If so how is it configured please.
I understand that usernames/passwords are sent in clear but are there any other security
benefits that securing the web console provides?
Thanks
Sam
If so how is it configured please.
Enable Secure Channels with SSL.
http://www.solarwinds.com/NetPerfMon/SolarWinds/wwhelp/wwhimpl/api.htm?href=OrionAGEnablingSSL.htm
are there any other security benefits that securing the web console provides?
- You are sure the server you are connecting to is your server and not a server installed by someone else to e.g gather passwords because your browser is checking the server's certificate. - Phishing scenario-
- If you run a inventory report on the web console, someone that sniff the packets can display the results by extracting the files from the trace. He would not even need to connect to the web console to have this information. (http://sourceforge.net/projects/networkminer/)
HTH,
Yann
SolarWinds solutions are rooted in our deep connection to our user base in the THWACK® online community. More than 195,000 members are here to solve problems, share technology and best practices, and directly contribute to our product development process.