RAM 6000 Technical Information PDF herunterladen (Seite 109)

Software Manual 109

Services Tab

Select Activity Log Level: This option controls the logging level for SSL Connection activity. The recommended setting

for a production environment is: Summary. For a test environment: Full.

Wait for Connection (sec.): Time (in seconds) allowed after sending SYN packets, to wait for SYN-ACK. The recom-

mended setting for this field is 20 seconds.

Idle Timeout (min): Time (in minutes) allowed for no traffic over an SSL connection, before closing down the link. The

recommended setting for this field is 720 (minutes).

Enable Advance Setup: Select Yes to modify advanced SSL options.

Bind Interface for accepting TCP Connections: This will restrict the unencrypted listening socket to allow connections

coming into the specified interface only. The recommended setting for this field is Any.

Bind Interface for outgoing SSL Connections: This will restrict the encrypted socket to initiate connections out the

specified interface only. Specifying an interface here may conflict with policy routing, however it may be required in a

GRE/VPN or other tunneled environment. Please consult with a network architect for additional assistance. The rec-

ommended setting for this field is Any.

Ciphers: This field is a list of supported openssl ciphers. Please consult support staff before attempting to change

these values. Reference Google: “openssl cipher list” for more information. The recommended setting for this field is:

RC4-MD5:RC5-SHA:SSLv3

Select Certificate: Specifying a certificate in client mode will use this certificate chain as a client side certificate chain.

Using client side certs is optional. The certificates must be in PEM format, with an unencrypted key (not password pro-

tected when generated). Use Admin->Certificate Manager to install/update certs.

Select Keep-Alive behavior: This option enables TCP Keep-alives on the underlying sockets. The following options are

supported:

•None: Keep-alives not used.

• All: Keep-alives enabled for all sockets.

• Accept: Keep-alives enabled for listening server socket side connections only. This applies to the clear text server for Cli-

ent mode sockets, or the SSL Encrypted server for Server mode sockets.

•Remote: Keep-alives enabled for client initiated sockets.

•Local: Keep-alives enabled for Client connections bound to a local IP address.

You may need to adjust the master Keep-alive timer via Network->TCP Global Settings->TCP Keep Alives.

Note: Enabling TCP keep-alives may dramatically increase the total amount of traffic for the affected socket(s) depend-

ing on the master interval, probe and timeout settings, which should be considered for connections using a wireless

(cellular) connection with respect to total data usage for the subscripted plan.

1 2 ... 104 105 106 107 108 109 110 111 112 113 114 ... 210 211

Keine Kommentare

RAM 6000 Technical Information Seite 109