Maintaining HTTP service security

Using an HTTP virtual firewall

How the firewall provides security

An HTTP virtual firewall provides security on your filer by restricting HTTP access through the subnet interface over which the HTTP requests arrive. You restrict HTTP access by marking the subnet interface as untrusted. An untrusted subnet interface provides only read-only HTTP access to the filer. By default, a subnet interface is trusted.

When to mark a subnet interface as untrusted

Mark a subnet interface as untrusted if it meets all the following conditions:

You know you are going to service HTTP requests over that interface.
You do not want to allow requests through protocols other than HTTP.
You want to restrict access to the filer through that interface to read-only access.

Restricting HTTP access

To restrict HTTP access over a subnet interface, complete the following step.

Step	Action
1	Enter the following command: *ifconfig interface_name* [trusted\|untrusted]** interface_name is the specific interface to set as trusted or untrusted. Use `untrusted` to restrict HTTP access or `trusted` to allow full HTTP access. Example This example marks the f0 interface as untrusted. ifconfig f0 untrusted

Step

Action

Enter the following command:

ifconfig interface_name [trusted|untrusted]

interface_name is the specific interface to set as trusted or untrusted.

Use untrusted to restrict HTTP access or trusted to allow full HTTP access.

Example

This example marks the f0 interface as untrusted.

ifconfig f0 untrusted