HTTP access to the management GUI

Products

• ProxySG Software - SGOS

Issue/Introduction

By default, access to the ProxySG Management GUI is performed using the encrypted HTTPS protocol (over port 8082). The HTTP console (using port 8081) is configured but disabled by default. There are a number of occasions where access is required using the unencrypted HTTP protocol. For instance:

• To diagnose problems with the GUI console where it is necessary to produce a packet capture of the GUI traffic. (Taking a packet capture of the default HTTPS GUI will only capture encrypted traffic, which cannot be read).
• HTTPS access has stopped working and you want to see if HTTP access is still possible. If so, this could allow the problem to be investigated further.
• if the default keyring that is used to make the https connection to management console is invalid or corrupted and needs to be changed before being able to access GUI via HTTPS.

 

Resolution

 

This can be done two ways. Via the management GUI, if you are still able to access it. Otherwise if HTTPS access is restricted, the command line can be used.

 

Via GUI

• Go to configuration--> services--> management services

• Check the Enable box for "HTTP-Console" service.
• Click "Apply" to save changes.

 

 Via CLI

The console commands below show how to view the current status, enable the console and then disable the console.

ProxySG#conf t Enter configuration commands, one per line.  End with CTRL-Z. ProxySG#(config)management-services ProxySG#(config management-services)edit http-console ProxySG#(config HTTP-Console)view Service Name:   HTTP-Console Service:        HTTP-Console Destination IP    Port Range <All>             8081              Disabled ProxySG#(config HTTP-Console)enable all 8081   ok ProxySG#(config HTTP-Console)view Service Name:   HTTP-Console Service:        HTTP-Console Destination IP    Port Range <All>             8081              Enabled   ProxySG#(config HTTP-Console)disable all 8081   ok ProxySG#(config HTTP-Console)view Service Name:   HTTP-Console Service:        HTTP-Console Destination IP    Port Range <All>             8081              Disabled

 

After enabling Port 8081 the GUI can then be accessed using http://x.x.x.x:8081.

 

NOTE: For security reasons, the HTTP GUI should only be enabled for the duration of the required testing.