Grandstream UCM6100 Security Manual - Manual (Page 5)

UCM6100 Security Manual Page 4 of 23
WEB UI ACCESS
UCM6100 HTTP SERVER ACCESS
The UCM6100 embedded web server responds to HTTP/HTTPS GET/POST requests. Embedded HTML
pages allow users to configure the device through a web browser such as Microsoft IE, Mozilla Firefox,
Google Chrome and etc. This is the most important tool to configure all the settings on the UCM6100. It’s
also the immediate interface for the administrator to access configurations, user status and all the system
information. Therefore, it’s crucial to understand that directly placing the UCM6100 on public network could
expose the domain name / IP address of the UCM6100 and pose serious security concerns.
PROTOCOL TYPE
HTTP and HTTPS (default) are supported to access the UCM6100 web UI. It can be configured under web
UI->Settings->HTTP Server. The protocol type is also the protocol used for zero config when the endpoint
device downloads the config file from the UCM6100. Therefore, it’s recommended to use HTTPS instead
of HTTP to secure the transactions and prevent unauthorized access.
USER LOGIN
UCM6100 web UI access is restricted by user login. Username and password are required when logging in
to web UI.
Figure 1: UCM6102 Web UI Login