Disabling HTTP-based device access does not take effect on the USG6550

Hi Qazik,

Related description in the product documentation:

Packets can access the target interface only when the access management function is enabled on the inbound interface. For example, if you need to access the GigabitEthernet 1/0/2 interface but the packets enter the device through the GigabitEthernet 1/0/1 interface, you must enable the access management function of the GigabitEthernet 1/0/1 interface so that you can access the GigabitEthernet 1/0/2 interface.

The data packets from the PC to the heartbeat interfaces of the two firewalls are sent from firewall A's interface 1 where the service-manage http service is enabled. Therefore, all interfaces of firewall A can be accessed through HTTP, including interface 2 regardless of whether the service-manage http service is enabled on interface 2.

I hope it helps!