How secure is the web based Powerchute agent?

[jumbo777_apc]

This was originally posted on APC forums on 5/7/2015

---

I have a question, if anyone can shed a little light on this: I am able to access the agent from another computer on my network if I enter the (ip address?) in the url box in the broswer. That other computer does not have any of the Powerchute Business Edition installed. The question is, can anyone who knows the ip address (what is in the url box), username and password get into my agent and start tweaking settings or can this only be done within my network?

[BillP · Accepted solution]

This reply was originally posted by Bill on APC forums on 5/8/2015

---

Hi,

Anyone who has access to your network, knows the system IP, the user name and password assigned to the PowerChute Agent can make changes. The user name and password should only be provided to trusted staff members and the network should be protected from outside intruders.