W&T 57630 Manual page 200

W&T
Ports and network security
custom modifications) is used. For additional details, refer to
the respective sections in this Manual.
7.3.3 The authorization concept of the Web-IO:
As already described in the section Web-Based Management, the
Web-IO uses three authorization levels:
. Default User (with no special login)
. Operator
. Admin
These users normally access Port 80 through the Web interface,
as is customary with http.
The default user can use the Web interface to read Web-IO data,
and has access to the diagnostic tools as well as some online
documentation (abbreviated manual, data sheet for the device,
support information).
The operator can also set the outputs and configure the alarm
outputs. No other settings can be changed by the operator.
The Administrator has full access to all the functionalities of the
device. He specifies the operation mode(s) used and the network
parameters.
Passwords can be defined for the Operator and Admin. The device
does not require that passwords be used, nor that they must be
different for the Operator and Admin, nor the minimum length,
composition or regular changing of othe passwords. This is left to
the user as he sees fit.
No encoding is used to send the password to the Web-IO. You
should therefore ensure that password-protected access is only
over an Intranet which the customer considers to be secure. For
accesses over the public Internet, additional measures such as a
VPN tunner (Virtual Private Network) may need to be taken. But
this is a general problem of network security, and every customer
needs to find his own solutions.
200