Management, IP and permitted network.
So what is the benefit of this?
Basically, whenever you access the power to network management IP as just we discuss this, every little
device.
It has a separate management interface and the network interfaces traffic is separate.
So basically the management clean and the network clean up is separate than the rest of the network.
So you can keep accessing the devices in case of even the network video.
Also, we can segregate.
So the management traffic is very important.
The management traffic control through the management we are accessing, the devices we are configuring
on a day to day configuration we are using, given the possible user name is.
But if somebody is in the middle, can can put some kind of above charge and can see not using the management
interface.
And if you allow everyone to access the management of the firewall, what is going to happen that people
that everybody can access it right now?
If you look at this, if you go to the interface and management.
You can see anybody can have the access to the.
To what?
OK, so, for example.
My IP is.
Look.
Who was it?
OK.
No, if I just permit this next one, what is going to happen?
What I'm going to say that only this person.
Then two five two one eight, he should be able to access the.
Firewall through ballot SFH and.
Griffith.
But tell me, if I do this, what is going to happen?
Only the person who has decided this will be able to access the firewall and manage it to most likely
in your life, knew I wasn't the only one.
If you if you have noticed anything, if you are not going to get anything, it means by default anybody
going to my name and password.
But you only want to stick to the particular people, a particular department, like most likely your
ideal security department.
And you the best thing is you can that who can actually.
Both.
Let's be prejudice, whatever prejudice and the chemical changes.
You guys will not be able to access the final only five, you'll be able to ask for the.
So, know, I just want to see all of you guys and try to access the file through GPS, telnet and things,
but I'm not sure the thing will work or not because now we are only.
OK, I can give it to you guys.
Thing is, when are you see you are totally blocking anything as well.
You can't say you can't tell that you can't assess it and you can't do the HDTV as well.
This.
OK, so better watch what I can do is what I can do, the better way I can do, I can allow the rather
than I can handle the network, I feel I can allow the whole network and to twenty three.
I notice now you will see all of you guys, you'll be able to access the device, so it's a beautiful
thing because you need to manage your customer firewall or your firewall and you want to protect the
people only, OK?
And if somebody asks you, can you a loaded file and I don't think they'll let me get you in the life
environment very, very common that you only stick to the particular people, the people, the people
who can make the changes with a fine.
But because you want to protect your security asset, it is very, very important.
And it's a very common practice.
I mean, we have your customary Medicare for all we for example, sometimes we get to public IP addresses
and we can vytenis that that only from this IP they should be able to access it.
We recently we I had a big escalation from one of our customer and he complained why you have left our
financial management open from all over the world and people are trying to brute force into that what
they are using, just trying different username and password.
And as a result, we are letting things in our network.
We will never secure the particular post so that people can access the file for the management.
Yep.
Dreidel, dreidel, dreidel, dreidel should be able to.
Yes, it's working right?
So basically all you can do is go, but this is actually you control the who can make who can even access,
you know, making sure you hear something different, username and password or something different,
which because of all the requests are coming from a particular social network.
Now, we actually allowed the whole network that is over.
That is our whole complete network and two of us.
OK, and this is that's this is how you can control that which network if I just put zero zero, for
example, which is already by default.
OK, that is me, you know, everybody is able to access not to do that.
Never, never, never, never do this kind of mistake.
Thank you.