I found way to disabling access to the
https://<management>/console and permit access only to 9000 port.
Edit /etc/mnt/clif.conf as follows in the docker container named clif_, and restart the container.
before:
location = /console {
return 301 https:/<hostname>/console/;
}
location /console/ {
proxy_set_header X-Fg-Client-Ip $proxy_protocol_addr;
proxy_pass
http://management/;error_page 502 /internal_resources/mgmt_unavailable.html;
}
after:
location = /console {
return 301
https://<hostname>/;}
location /console/ {
return 301
https://<hostname>/;}
Broadcom won't support this settings, but it works well.