The Admin Console web-ui is the go-to place for managing your Zimbra installation.
Historically the Zimbra Admin Console was accessed directly without Zimbra Proxy. However there is no longer a need to access the Admin Console without using Zimbra Proxy. And to make sure the Admin Console uses the best TLS security you need to make sure to proxy the Admin UI via Zimbra Proxy. This means you should access Admin UI via the proxied port 9071, and deny access to port 7071 via a firewall. To enable this you should run as user Zimbra:
/opt/zimbra/libexec/zmproxyconfig -e -w -C -H `zmhostname`
zmproxyctl restart
For further security hardening of Zimbra take a look at:
Comments are closed.