Shulou(Shulou.com)06/01 Report--

I. invalidation of the certificate

1. To install the new certificate SecGateAdmin.p12, you need to enter a password of 123456 in the next step.

2. Change the certificate after February 11, 2016, log in to the backend using the console port, use the admin account with the password of admin@123, and modify the system time (before 2016-2-11, the difference between the computer time and the system time is no more than 10s) as shown below:

Login using https://10.50.10.45:8889 after modification

II. Port

If you can't log in, use the console port to use super permissions: login:root password:secroot

SecGate3600 > ps-ef | grep httpd to check whether the httpd process is enabled

281 root 4684 S / usr/local/webserver/lhttpd-c cgi-bin/**-

283 root 4684 S / usr/local/webserver/lhttpd-c cgi-bin/**-

6899 ttyS0 root 1352 S grep httpd

SecGate3600 > netstat-antp | grep httpd to view the port of httpd

Tcp 0 0: 8888: * LISTEN 281/lhttpd

Tcp 0 0: 8889: * LISTEN 283/lhttpd

SecGate3600 > cat / proc/secgate/conf/local_unlimit settings for local users

0

SecGate3600 > echo 1 > / proc/secgate/conf/local_unlimit modify settings for local users

SecGate3600 > cat / proc/secgate/conf/local_unlimit

one

Then enter https://10.50.10.45:8889 in the browser to access it, using the old certificate

After logging in through the web interface, import the pkg file in the upgrade file under the system Administration-upgrade license. (this document is asked by the manufacturer of the Internet God.)

Install a new certificate New-SecGateAdmin.p12 with a default password of 111111

After setting the computer system time to the current time, access the firewall with the new certificate.

Log in again by entering https://10.50.10.45:8889 in the browser

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.