HTTP Server Config

Use this page to configure the HTTP Server Port on which the web server will run.

Select Network Configuration / HTTP.

 

HTTP Enable – Enter the port number for the HTTP server. The default is port 80.

HTTP Server Port – Enter the port number for the HTTP server. The default is port 80.

HTTP Secure Enable – Enter a port number (the default is 443) and update your port forwarding rules (if applicable). You can then access the secure port by using the "https://" extension.

These settings are only available if the HTTPS option is installed. See Receiver Options – Details.

The receiver can support a secure HTTP link, with encryption limited to a 56-bit encryption.

By default, Mozilla Firefox does not support this low-grade encryption. Turn on the security.ssl3.rsa_1024_rc4_56_sha option by going to about:config in Firefox.


Network Security Risks

This list indicates the possible security risks associated with the receiver. Implementing HTTPS and High Security mode improves the security of the device, but you should also minimize all the different points where an unauthorized user could get into the system. All services that are not required should be disabled. For example:

  • If the application does not require the FTP server, turn it off. See FTP Server Configuration.

  • If HTTPS is active, turn off HTTP. See HTTP Enable above.

  • Is HTTPS needed? If the application does not require web access, both HTTP and HTTPS can be disabled. See HTTP Enable and HTTP Secure Enable above.

  • If service discovery is not required, then turn off mDNS, UPnP, and NETBIOS. See Network Service Discovery Configuration. These features are very useful during integration and development, but may not be used in the end application and can become security vulnerabilities.

  • If NTP is not required, disable it. See NTP Configuration.

  • Disable all unused TCP/IP and UDP connections. See I/O Configuration. Only allow inbound connections on the remaining ports if the use case requires it. The ports can be configured as output only, if the application only requires information from the receiver make sure the port(s) are set to output only.

  • If HTTP and/or HTTPS must be enabled, make sure that the user accounts have the appropriate permissions.

  • Enable the High Security mode. See High Security above.