Re: Secure replacement for "Secure" web console?

From: Alan Johnson (adjtech_at_ulster.net)
Date: 08/24/03

  • Next message: Alan Johnson: "Re: Samba problems sharing a drive to W2000 (with usermap and SHARE security)" 
    Date: Sun, 24 Aug 2003 12:33:12 -0400

    Ken Green wrote:

    > user@domain.invalid wrote:
    >
    >
    >>Has anyone found a *secure* replacement for the HP "Secure Web Console"?
    >>
    >>We've currently got a few web consoles deployed and find them to be a
    >>wonderful tool. However, due to the well publicized security flaws in
    >>these devices, we're looking for a replacement. (See
    >>http://cert.uni-stuttgart.de/archive/bugtraq/1999/12/msg00006.html for
    >>more info on how insecure these things are.)
    >>
    >
    >
    > This depends on the version of the firmware on the secure web console.
    > More recent ones are much better. The ones built into a couple of a500
    > sitting on my floor, use https..., even the old separate box one I have
    > which
    > I think I upgraded the firmware on (can't remember it was a while ago)
    > no longer uses the simple XOR trick of old, it definitely does not send the
    >
    > same char for the same key all the time.
    >
    > Check out the firmware you have, and also try checking out the data flowing
    >
    > over the net.
    >
    > Cheers
    >
    > Ken
    >
    >
    If you have a few systems look in to Cyclades console servers, work very
    well and use ssh.

  • Next message: Alan Johnson: "Re: Samba problems sharing a drive to W2000 (with usermap and SHARE security)"

    Relevant Pages

    • Re: Secure replacement for "Secure" web console?
      ... >> This depends on the version of the firmware on the secure web console. ... We've got the old external web consoles that connect to the serial port. ... Upgrades require hardware. ... Upgrading the L server GSPs *may* be an option, ...
      (comp.sys.hp.hpux)
    • Re: Secure replacement for "Secure" web console?
      ... > We've currently got a few web consoles deployed and find them to be a ... due to the well publicized security flaws in ... This depends on the version of the firmware on the secure web console. ... no longer uses the simple XOR trick of old, it definitely does not send the ...
      (comp.sys.hp.hpux)