Define a Hostname for Accessing Web Interface

It's recommended to configure a hostname for the device's Web interface and enforce access through the hostname only. When enforced, all attempts to access the device through its IP address is blocked. Accessing the device with a hostname instead of an IP address helps protect against HTTP Host header (manipulation) attacks and DNS rebinding attacks.

When there is an attempt to access the device with a hostname, the device checks that the value of the Host header matches the configured hostname. If there is no match, the device rejects the request with an HTTP 403 Forbidden response.

➢

To configure hostname for Web interface:

1.

Open the Web Settings page (Setup menu > Administration tab > Web & CLI folder > Web Settings).

2.

In the 'Web Server Name' field [WebHostname], type a hostname for the device:

3.

From the 'Enforce Web Host Name' drop-down list, select Enable:

4.

Click Apply.