Details

It is recommended that the HTTPS interface be configured and the HTTP interface be disabled.

The HTTP interface that is started by default has the same limitations as Telnet.

Solution

The command to disable HTTP is as followsn

ProCurve Switch(config)# no web-management plaintextn

Supportive Information

The following resource is also helpful.

• http://www.hp.com/rnd/pdfs/Hardening_ProCurve_Switches_White_Paper.pdf

This security hardening control applies to the following category of controls within NIST 800-53: Configuration Management.This control applies to the following type of system HPProCurve.

References

• 800-53|CM-7b.
• CSCv6|9.1

Source

• Tenable.com/audits