HTTP/HTTPS

Introduction

The device provides a built-in Web server. You can use a Web browser to log in to the device through HTTP or HTTPS.

·     HTTP login

The device supports HTTP 1.0 and HTTP 1.1.

·     HTTPS login

HTTPS uses SSL to ensure the integrity and security of data exchanged between the client and the server, and is more secure than HTTP.

To allow HTTPS login, you must enable the HTTPS service. By default, the device uses a self-signed certificate (a certificate that is generated and signed by the device itself) and the default SSL settings.

For better integrity and security of data exchanged between the client and the server, you can associate an SSL server policy with HTTPS to define the SSL settings.

The device supports the following HTTPS login types:

¡     Username—A user must provide a username and password at login.

¡     Certificate—A user must provide a digital certificate at login.

¡     Username and certificate—A user must provide a username and password together with a digital certificate at login.

USB key login is a certificate-based HTTPS login method. If a user clicks Log in using a USB key on the login page, the user needs to select a digital certificate in the USB key as prompted to log in.

The device can use ACLs to prevent unauthorized HTTP and HTTPS access. If the used ACLs exist and have rules, only users permitted by the ACLs can access the device through HTTP or HTTPS.