Security Comparison; Ssh Server - Comtrol DeviceMaster DM-2000 Series Installation And Configuration Manual

Security Comparison

This table displays addition information about security feature comparisons.
Supported by
RedBoot
SocketServer
NS-Link Driver/MAC
NS-Link Driver/IP
Serial Monitoring
TCP to Serial Ports
SSH to Serial Ports
UDP to Serial Ports
Telnet/Port23
SSH Telnet/Port 22
Telnet Port 4607
SSH (PuTTY) 4607
HTTP (Port 80)
HTTPS (Port 443)
Email
SNMP
RFC1006
† Enable Monitoring Secure Data via Telnet must be enabled. SSH does not support port monitoring. You
can set the securemon enable option.

admin commands are disabled except for read-only ID command required by NS-Link to identify the
device.
The intention is to allow NS-Link to operate through an SSL connection to Port 4606 while is in Secure Data
Mode, and to allow NS-Link to operate through a MAC connection with Secure Config Mode enabled and Secure
Data Mode disabled.

SSH Server

The DeviceMaster SSH server has the following characteristics:
• Requires password authentication – even if the password is empty.
• Enabled/disabled along with telnet access independently of Secure Data and Secure Config Modes.
• The DeviceMaster uses third-party MatrixSSH library from PeerSec Networks: http://www.peersec.com/.
DeviceMaster Installation and Configuration Guide: 2000594 Rev. F
Weakest
0 1 2
None Password Authentication
yes yes yes
yes yes yes
yes yes yes
yes yes yes
yes yes yes
yes yes yes
no no no
yes yes yes
yes yes yes
yes yes yes
yes yes yes
no no no
yes yes yes
no no no
yes yes yes
yes yes yes
yes yes yes

3 3
Secure Config Secure Data
no yes
yes yes
no no
yes
no yes †
no no
yes yes
disabled disabled
disabled yes †
yes yes
disabled yes
yes disabled
disabled disabled
yes yes
disabled disabled
disabled disabled
disabled disabled
Security Comparison
Strongest
4
Key & Certificate
no
yes
no
no
no
yes
disabled
disabled
yes
yes
disabled
disabled
yes
disabled
disabled
disabled
DeviceMaster Security - 73