ISX MGR + AP7931 + Firmware 3.x.x

Anonymous user · ‎2021-06-30

Hey all,

I have been going back and forth with APC Support for just about two month's with our newest issue. We purchased two new AP7931 Rack Mount PDU's, and they came shipped with the newest firmware release, 3.5.5. ISX Manager could not see them, regardless of configuration settings I was utilizing. Even an updated PDU we've had in service for 2 years failed to register.

Come to find out, the only way in which ISX Manager can add and communicate with PDU's running this version is to have the username & password on all managed devices and the ISX Mgr, the default apc/apc combination. Is it just me, or does that not seem like a huge security flaw? The apc/apc default information is posted all over the place. Supposedly this will be addressed in the next release, which has yet to have a date set.

As a result, we are running the latest 2.x.x on all of our managed pdu hardware, and downgraded all of our newly shipped hardware. Anyone else run into this?

Kris
Network Admin

Anonymous user · ‎2021-06-30

Hey all,

I have been going back and forth with APC Support for just about two month's with our newest issue. We purchased two new AP7931 Rack Mount PDU's, and they came shipped with the newest firmware release, 3.5.5. ISX Manager could not see them, regardless of configuration settings I was utilizing. Even an updated PDU we've had in service for 2 years failed to register.

Come to find out, the only way in which ISX Manager can add and communicate with PDU's running this version is to have the username & password on all managed devices and the ISX Mgr, the default apc/apc combination. Is it just me, or does that not seem like a huge security flaw? The apc/apc default information is posted all over the place. Supposedly this will be addressed in the next release, which has yet to have a date set.

As a result, we are running the latest 2.x.x on all of our managed pdu hardware, and downgraded all of our newly shipped hardware. Anyone else run into this?

Kris
Network Admin

See Answer In Context

TheNotoriousKMP_apc · ‎2021-06-30

That is correct. The anomoly exists with 3.x firmware on the PDU's and ISX Manager's Private side. If you wish to use a customized Username/Password, simply move the device to the public side and assign it an IP. It is not that large of a security flaw, unless someone can access your ISX Manager publically.

EZ_Button_apc · ‎2021-06-30

If you turn off the APC Proxy, the only way to access the devices on the APC Lan would then be through the password secure ISX Manager. Just another work around for now until the new fw release.

Anonymous user · ‎2021-06-30

Hey all,

I have been going back and forth with APC Support for just about two month's with our newest issue. We purchased two new AP7931 Rack Mount PDU's, and they came shipped with the newest firmware release, 3.5.5. ISX Manager could not see them, regardless of configuration settings I was utilizing. Even an updated PDU we've had in service for 2 years failed to register.

Come to find out, the only way in which ISX Manager can add and communicate with PDU's running this version is to have the username & password on all managed devices and the ISX Mgr, the default apc/apc combination. Is it just me, or does that not seem like a huge security flaw? The apc/apc default information is posted all over the place. Supposedly this will be addressed in the next release, which has yet to have a date set.

As a result, we are running the latest 2.x.x on all of our managed pdu hardware, and downgraded all of our newly shipped hardware. Anyone else run into this?

Kris
Network Admin