Tutorial: How to Isolate Access Server's Web Services⁠

• An installed Access Server.

• Admin Web UI access.

1. Sign in to the Admin Web UI.

2. Click Web Services.

   • The Admin Web Server tab displays.

3. Select the local host from the drop-down for Make the admin web server available on selected interfaces. (E.g., Change the drop-down from "All interfaces" to "lo - 127.0.0.1/8.")

4. Turn Make the admin web server also reachable on OpenVPN TCP daemon port 443 to Off.

5. Click Save.

6. Click the Client Web Server tab.

7. Turn Also make the client web server reachable on OpenVPN TCP daemon port 443 to Off.

8. Click Save and Restart.

Now you can set your firewall to only allow ports TCP 443 and UDP 1194, the default ports for the OpenVPN daemons.

Access Server should still be able to establish OpenVPN tunnel connections, but the web interfaces are unreachable.