W&T 58620 Manual page 86

W&T
Appendix
In order to provide the customer with the greatest possible
flexibility which is oriented towards changing security
requirements from a pure testing and installation environment
to critical production applications, the safety measures have
been made highly customer-configurable. The present
document provides an overview of the safety measures which
have been implemented and can be used on the LAN-Modems.
It is presumed here that the original W&T firmware (without any
customer modifications) is being used. Additional details can
be found in the respective sections of this manual.
The authorization concept of the LAN-Modem
Control and configuration access to the LAN-Modems is
protected by the system password. The factory default setting
is for no system password, so that anyone logging in has full
access to the corresponding settings and functions. To prevent
unauthorized access, it is therefore recommended that a
system password be used. Additional measures in this regard,
such as the composition and regular changing of this
password, should be taken by the customer in an organizational
way.
The system password is transmitted to the LAN-Modem without
encoding. It must therefore be ensured if necessary that
password-protected access can be gained only over an Intranet
which the customer deems to be safe. For access over the
public Internet, additional measures such as the addition of a
VPN tunnel (Virtual Private Network) should be taken. This is
however a general issue for network security for which each
customer must find the appropriate solutions.
Ports with special functions
In addition to access over Telnet, there are a variety of
functions which can be activated over various TCP or UDP ports.
These are shown in the previous table. Details can be found in
the indicated sections of this manual.
86