Genius Gateway - GE PACSystems RX3i Secure Deployment Manual

Chapter 5. Configuration Hardening

5.2 Genius Gateway

This section provides information to use when hardening the configuration of and access to a Genius
Communications Gateway.
Service
IP Routing
SD Card Identity
Physical Access
22
How to Disable
Set Gateway IP Address to 0.0.0.0 in the hardware configuration and
download to the PROFINET I/O controller.
Set the name of the Device using a DCP Client with the SD Card inserted.
Remove SD Card and enable the physical Write-protect feature on the
SD Card. Re-insert the SD Card in the Gateway. This will prevent future
attempts to rename the Scanner from persisting over a power cycle.
Restrict physical access to the rear of the Gateway. Consider the use of
secure screws when mounting the Gateway. This will prevent future
attempts to perform an unauthorized firmware upgrade by restricting
access to the SD card and the firmware upgrade pushbutton.
PACSystems PROFINET IO Devices Secure Deployment Guide GFK-2904D