Access to the Status Server must be restricted to clients within the CFHT network. Using a low numbered port (below 1024) should be sufficient to enable blocking by the router. If access is limited via the port number, it would still be possible for employees to access the Status Server from outside the CFHT network, via ssh port forwarding.