topic Re: SMB R81.10.15 CLI window access fails in Spark Firewall (SMB)

SMB R81.10.15 CLI window access fails in FireFox

G_W_Albrecht — Tue, 24 Sep 2024 07:38:58 GMT

One of the new, long awaited features for SMB R81.10.15 is an own CLI window in WebGUI. But while this works perfectly in GAiA, SMB R81.10.15 fails with a self-signed certificate error!

When first connecting to the SMB, i use no :4434 o.s. and click on accept risk and continue:

Now, i can log in to WebGUI and try to call the CLI wondow, but in vain:

Here, i can not accept the risk and continue again - i have really not being able to find out how i could enable the use of this CLI window...

Re: SMB R81.10.15 CLI window access fails

PhoneBoy — Mon, 23 Sep 2024 18:52:02 GMT

I went into my system (using port 4434, typed "thisisunsafe" to bypass the TLS warning)...and clicked on the prompt button.
Spinning wheel...

Paging @Amir_Ayalon

Re: SMB R81.10.15 CLI window access fails

PhoneBoy — Mon, 23 Sep 2024 18:53:48 GMT

Actually, it looked like it timed out.
When I refreshed the page:

Re: SMB R81.10.15 CLI window access fails

Dafna — Tue, 24 Sep 2024 06:15:31 GMT

Hi,

Does it work if you try to open it from chrome?

Thanks,

Dafna

Re: SMB R81.10.15 CLI window access fails

G_W_Albrecht — Tue, 24 Sep 2024 07:38:34 GMT

Using Edge it does work - but not in FireFox ! What wants to use a Google/MS browser ?

Re: SMB R81.10.15 CLI window access fails

Noa_Alon — Tue, 24 Sep 2024 07:50:38 GMT

Hi,

Please note that this is a known limitation in R81.10.15.

in the Firefox browser, you need to accept the access manually.

Please access the relevant GW URL and click accept.

Then, you should be able to access the “Terminal from WebUI”

Re: SMB R81.10.15 CLI window access fails

G_W_Albrecht — Tue, 24 Sep 2024 09:09:01 GMT

You will have to add the needed exception manually to FF:

Re: SMB R81.10.15 CLI window access fails

G_W_Albrecht — Tue, 24 Sep 2024 09:15:16 GMT

This is not so easily done as you suggest - the first exclusion is easy as FF shows it for you to accept, but the second one for :5555 must be defined manually, see my screenshot above!