Comtrol DeviceMaster DM-2000 Series Installation And Configuration Manual page 80

Configure/Enable Security Features Overview
If Secure Data Mode is enabled TCP connections which carry data to/from the serial
ports will be encrypted using SSL or TLS security protocols. This includes the
following:
•
•
Enable Secure Data
•
Mode
•
In addition to encrypting the data streams, it is possible to configure the DeviceMaster
so that only authorized client applications can connect using SSL/TLS. See the
Authentication
If Secure Config Mode is enabled, unencrypted access to administrative and diagnostic
functions is disabled. Secure Config Mode changes DeviceMaster behavior as follows:
•
•
Enable Secure Config
•
Mode
•
•
80 - DeviceMaster Security
Security Option Descriptions
TCP connections to the per-serial-port TCP ports (default is 8000, 8001, 8002, and
so forth) are encrypted using SSL/TLS.
TCP connections to TCP Port 4606 on which the DeviceMaster implements the
Comtrol proprietary serial driver protocol are encrypted using SSL/TLS.
Since SSL/TLS can not be used for either UDP data streams or for the Comtrol
proprietary MAC mode Ethernet driver protocol, both UDP and MAC mode serial
data transport features are disabled.
In order to minimize possible security problems, e-mail and RFC1006 features are
also disabled in Secure Data mode.
discussion on Page 75 for details.
Telnet access to administrative and diagnostic functions is disabled. SSH access is
still allowed.
Unencrypted access to the web server via Port 80 (http://URLs) is disabled.
Encrypted access to the web server via Port 443 (https://URLs) is still allowed.
Administrative commands that change configuration or operating state which are
received using the Comtrol proprietary TCP driver protocol on TCP Port 4606 are
ignored.
Administrative commands that change configuration or operating state that are
received using the Comtrol MAC mode proprietary Ethernet protocol number
0x11FE are ignored.
DeviceMaster Installation and Configuration Guide: 2000594 Rev. F
Client