Configure Firewall Settings - GE Multilin D400 Instruction Manual

CHAPTER 12: USING THE D400 LOCAL CONFIGURATION UTILITY

Configure firewall settings

D400 SUBSTATION GATEWAY INSTRUCTION MANUAL
5. Choose option 1. Enable/Disable Rsyslog Logging service
By default syslog UDP uses the 514 port number. If this is to be changed, choose
option 2. Edit UDP Port Number.
Before proceeding with this step, ensure that no other D400 applications/services are
using the same port number. You can do this by manually checking the Connections
tab of the D400 web/local HMI.
6. Return to the Configure Rsyslog Service menu.
7. Choose option 3. Configure Rx via TCP.
Result: The Receiving Messages via TCP - Settings menu appears.
The configuration options are similar to UDP.
8. Return to the Configure Rsyslog Service menu.
9. Choose option 4. Configure Hosts/Subnets filters.
Result: The Configure Hosts/Subnets filters menu appears.
This setting allows the D400 Rsyslog service to bind to the subnet/Host address. By
default, no binding filter rules are applied. That is, the D400 syslog application logs
messages being pushed IEDs connected through all available D400's network
interfaces.
10. Choose option 2. Add Hosts/Subnets to add Subnets and IP address of the Hosts/
IEDs.
11. Select the applicable interface from the list of available interfaces in the D400.
If the particular subnet is missing in the list choose one of the Custom Filters options.
Adding a subnet configures the D400 Rsyslog to log messages only being sent from
the IED-IP addresses which are in range of the configured subnet.
12. Choose option 3. Delete Hosts/Subnets to delete any of the added addresses.
13. Choose option 1. Current Settings to view the current settings configured.
The D400 contains a firewall capable of stateful packet inspection to protect your device
from unauthorized access. By default, network interfaces on the D400 drop packets that
are determined to be invalidly routed or unsolicited.
SECURITY NOTICE: The D400 firewall is intended only to protect itself and does not extend
protection to other devices on the network. As such, it does not replace the need for a
network firewall which offers deep packet inspection and detailed configuration
capabilities.
The D400 firewall is automatically configured by default to its most secure setting. The
user assumes all responsibility for associated security risks if the firewall configuration
is manually changed.
It is the user's responsibility to connect Internal zone interfaces to networks that are
protected from unauthorized use.
The D400 firewall is intended only to protect itself and does not extend protection to other
devices on the network. As such, it does not replace the need for a network firewall which
offers deep packet inspection and detailed configuration capabilities.
GE INFORMATION 143