Windows Firewall - ABB COM600 series 5.0 Cyber Security Deployment Manualline

3.2.3.
18
COM600 series 5.0
Cyber Security Deployment Guideline
Application type Application Name
COM600 VTRIN- Net Server
COM600 VTRIN- Net Server
COM600 Configuration Service,
Remoting Server
COM600 GOOSE Analyzer Tool
Server
COM600 CoDeSys ControlSer-
vice (Logic Processor)
COM600 COM600 Service
COM600 CoDeSys ControlSer-
vice (Logic Processor)
COM600 CoDeSys GatewaySer-
vice (Logic Processor)
COM600 DNP Slave OPC
Server (when using
secured version)
COM600 DNP Slave OPC
Server

Windows Firewall

Network security in COM600 can be accomplished by defining a set of rules used by
Windows Firewall. Windows Firewall is a software application which allows or blocks
any software program executing within COM600 from establishing a connection on the
network.
The network connection can be an outgoing connection initiated from COM600 or an
incoming connection to COM600. The outgoing connection rules are defined by creating
outbound rules and the incoming connection rules are defined by creating inbound rules.
The rules specify whether to allow or block a connection based on some defined criteria.
The criteria can include a combination of the factors listed below:
•
Program – specifies if the rule applies to a single program or to any programs. In
case of a single program, further relevant details like name and executing path can
be mentioned.
• Protocol and Port – specifies if the rule applies to a connection attempt made using
a specific network protocol (such as TCP, UDP) and on a specific port. The port
mentioned in the rule can cover both sides of a connection by specifying a Local
and Remote port number for the connection.
•
Scope – specifies if the rule applies to a connection attempt made using a specific
IP Address or set of IP Addresses. The IP Address mentioned in the rule can cover
both sides of a connection by specifying a local and remote addresses for the con-
nection.
Port Number Connection Type
7605 TCP
7606 TCP
8080 TCP
8089 TCP
8088 TCP
9932 TCP
11740 TCP
11743 TCP
19999 TCP
20000 TCP
1MRS758267