Firewall And Security Considerations - GE WattStation Installation And User Manual

Topology #13: WIFI + Ethernet + BMS + Proxy
In this configuration connectivity is provided to the site BMS system over Ethernet. Internet
connectivity is only available using the site proxy server. The proxy server is only reachable via
WIFI. The BMS network resides behind a gateway connected to the Ethernet LAN. A static route is
required to be configured on the WattStation to direct BMS traffic to this gateway.

5.4 Firewall and security considerations

5.4.1 Firewalls
The GE WattStation uses standard Internet HTTP & HTTPS protocols to connect to GE's dedicated
environment. Some locations may utilize firewalls or similar filtering devices to secure their
environment.
The following table lists IP addresses and ports that must be allowed for the GE WattStation to
communicate properly. The DNS names are provided as reference and firewall or filtering device
will most likely only use the IP address and TCP port numbers.
DNS Domain Name
GEWattstation.com
bemp.GEWattstation.com
bempd.GEWattstation.com
services.GEWattstation.com
© GE All Rights Reserved
IP Address Internet Port
165.156.12.9 TCP Ports 80 & 243
165.156.12.10 TCP Ports 80 & 243
165.156.12.11 TCP Ports 80 & 243
165.156.12.12 TCP Ports 80 & 243
40