Working with Networking on

Configuring Network Settings

Mon, 01 Jan 0001 00:00:00 +0000

When this option is selected, network configuration details added during installation are displayed. The network connection for the appliance are displayed. You can modify the network configuration as per the requirements.

Changing Hostname

The hostname of the appliance can be changed.

In the hostname field, if special characters are to be used, then only hyphen (-) is supported.

To change the hostname:

Using Network Troubleshooting Tools

Mon, 01 Jan 0001 00:00:00 +0000

Using the Network Troubleshooting Tools, you can check the health of your network and troubleshoot problems. This tool is composed of several utilities that allow you to test the integrity of you network. The following table describes the utilities that make up the Network Utilities tool.

Table 1. Network Utilities

Name	Using this tool you can...	How…
Ping	Tests whether a specific Host is accessible across the network.	In the Address field, type the IP address that you want to test. Press ENTER.
TCPing	Tests whether a specific TCP port on a Host is accessible across the network.	In the Address field, type the IP address. In the Port field, type the port number. Select OK.
TraceRoute	Tests the path of a packet from one machine to another. Returns timing information and the path of the packet.	At the prompt, type the IP address or Host name of the destination machine. Select OK.
MTR	Tests the path of a packet and returns the list of routers traversed and some statistics about each.	At the prompt, type the IP address or Host name. Select OK.
TCPDump	Tests network traffic, and examines all packets going through the machine.	To filter information, by network interface, protocol, Host, or port, type the criteria in the corresponding text boxes. Select OK.
SysLog	Sends syslog messages. Can be used to test syslog connectivity.	In the Address field, enter the IP address of the remote machine the syslogs will be sent to. In the Port field, enter a port number the remote machine is listening to. In the Message field, enter a test message. Select OK. On the remote machine, check if the syslog was successfully sent. Note that the appliance uses UDP syslog, so there is no way to validate whether the syslog server is accessible.
Show MAC	Finds out the MAC address for a given IP address. Detects IP collision.	At the prompt, type the IP address or Host name. Select OK.

Managing Firewall Settings

Mon, 01 Jan 0001 00:00:00 +0000

Protegrity internal firewall provides a way to allow or restrict inbound access from the outside to Protegrity Appliances. Using the Network Firewall tool you can manage your Firewall settings. For example, you can allow access to the management-network interface only from a specific machine while denying access to all other machines.

To improve security in the ESA, the firewall in v9.2.0.0 is upgraded to use the nftables framework instead of the iptables framework. The nftables framework helps remedy issues, including those relating to scalability and performance.

Using the Management Interface Settings

Mon, 01 Jan 0001 00:00:00 +0000

Using the Management Interface Settings option, you can specify the network interface that will be used for management (ethMNG). By default, the first network interface is used for management (ethMNG). The first management Ethernet is the one that is on-board.

If you change the network interface, then you are asked to reboot the ESA for the changes to take effect.

Note: The MAC address is stored in the appliance configuration. If the machine boots or reboots and this MAC address cannot be found, then the default, which is the first network card, will be applied.

Ports Allowlist

Mon, 01 Jan 0001 00:00:00 +0000

On the Proxy Authentication screen of the Web UI, you can add multiple AD servers for retrieving users. The AD servers are added as URLs that contain the IP address/domain name and the listening port number. You can restrict the ports on which the LDAP listens to by maintaining a port allowlist. This ensures that only those ports that are trusted in the organization are mentioned in the URLs.

On the CLI Manager, navigate to Networking > Ports Allowlist to set a list of trusted ports. By default, port 389 is added to the allowlist.