B One Models and Web Admin Access Defaults

Product Discussion
1

Hello,

Across our B One deployments, including 5G and Plus models, we observe Web Admin Access is set to LAN/WAN (In the GUI: System > Admin Security > Web Admin Access). We are trying to determine if this is the factory default setting for this model line. Thoughts?

2

It is, yes, it’s weird.

You can use bulk config to remedy this, or you can remedy it via IC2 policies.

3

Thanks for validating our finding.

Hopeful this post makes others aware of the setting. If a deployment uses a public static IP and Web Admin Access is set to LAN/WAN out of the box, the device login page is immediately exposed to the open internet.

To the Peplink team: please reconsider this default. It adds no value enabled out of the box, breaks with the precedent set by other model lines, and introduces unnecessary security risk.

1 Like
4

100% agree.

We have an internal runbook, some of which is published here, that we follow when setting up new environments for customers. While it’s not foolproof, having a checklist means we haven’t left it enabled in quite awhile.

1 Like