Home > Storage > PowerScale (Isilon) > Product Documentation > Security and Compliance > Dell PowerScale OneFS: Security Considerations > Disabling nonessential HTTP components
OneFS 9.4.0.0 and later releases include an option to disable nonessential HTTP components selectively. Disabling the services allows other essential services on the cluster to continue to run. The following nonessential services may be disabled:
Each of these services may be disabled independently. The services may be disabled through the CLI or API with the ISI_PRIV_HTTP privilege. To manage the nonessential services from the CLI, run the isi http services view and isi http services modify commands to view and modify the services. The following table lists the impacts of disabling each of the services.
Service | Impacts |
PowerScaleUI | The WebUI is entirely disabled. When a user attempts to access the WebUI, it displays Service Unavailable. Please contact Administrator. When the PowerScaleUI service is disabled and then enabled, the Platform-API-External service is also enabled, if it was disabled. However, disabling the PowerScaleUI service does not disable the Platform-API-External service. |
Platform-API-External | API requests external to the cluster are not accepted, and the WebUI is disabled because the WebUI uses the Platform-API-External service. Disabling the Platform-API-External service does not impact the Platform-API-Internal service of the cluster. The Platform-API-Internal services continue to function, even if the Platform-API-External service is disabled. When the Platform-API-External service is disabled and then enabled, the WebUI remains disabled until the PowerScaleUI service is enabled. |
RAN | If RAN is disabled, the WebUI components for File System Explorer and File Browser are disabled. In the WebUI, going to File System > File System Explorer displays the following message: Browse is disabled as RAN service is not running. Contact your administrator to enable the service. The same message is also displayed if you attempt to access any WebUI component that requires directory selection. |
RemoteService | If RemoteService is disabled, the WebUI components for Remote Support and InProduct Activation are disabled. In the WebUI, going to Cluster Management > General Settings and selecting the Remote Support tab displays the following message: The service required for the feature is disabled. Contact your administrator to enable the service. In the WebUI, going to Cluster Management > Licensing and scrolling to the License Activation section displays the following message: The service required for the feature is disabled. Contact your administrator to enable the service. |