Johnson Controls P2000 Installation Manual page 7

UNDERWRITERS LABORATORIES COMPLIANCE VERIFICATION SHEET
16. For P2000 or P2K software version 2.5 or later, when configuring "Service Startup" parameters the
following services shall not be disabled.
P2000 RTL Route Service
P2000 CK720 Download Service
P2000 CK720 Priority Service v1.0
P2000 CK720 Priority Service v2.1
P2000 CK720 Upload Service
P2000 Periodic Service
P2000 S321 SIO Handler Service, where S321-DIN controller is used
P2000 S321-IP Interface Service, where S321-IP controller is used
P2000 SIO Handler Service, where D620 or D6AP controller is used
P2000 Smart Download Service
17. For Line Security over the Internet, between the P2000 or P2K server and the controllers CK721-A version
3.1 or higher shall be configured to use an encryption method including an Authentication Header (AH) and
an algorithm capable of Triple-DES (3DES) or better that is NIST™ certified.
18. For Line Security over the Internet, between the P2000 or P2K server and the controllers CK705, CK720,
CK721, CK721-A version 3.0 or lower, and S321-IP the following equipment shall be used.
NetScreen®, Model NS-5XT-X0X (where X is any number 0 to 9), 4-Port VPN router
The P2000 or P2K server and router shall be configured to use an encryption method including an
Authentication Header (AH) and an algorithm capable of Triple-DES (3DES) or better that is NIST
certified.
19. For Line Security over the Internet, between the P2000 or P2K server and the controllers D620, D6AP, and
S320, the following equipment shall be used.
NetScreen, Model NS-5XT-X0X (where X is any number 0 to 9), 4-Port VPN router and
Digi® International, Model EtherLite2 serial port server
The P2000 or P2K server and router shall be configured to use an encryption method including an
Authentication Header (AH) and an algorithm capable of Triple-DES (3DES) or better that is NIST
certified.
20. For Line Security over the Internet, between the P2000 or P2K server and the controller S321-DIN, the
following equipment shall be used.
NetScreen, Model NS-5XT-X0X (where X is any number 0 to 9), 4-Port VPN router and
Digi International, Model Digi One SP serial-to-Ethernet converter or
B&B Electronics Mfg Co., Model 485OT9L RS232-to-RS485 converter
The P2000 or P2K server and router shall be configured to use an encryption method including an
Authentication Header (AH) and an algorithm capable of Triple-DES (3DES) or better that is NIST
certified.
21. The router and serial port server shall be installed within the same room as the controllers S320, D620 and/
or D6AP and within 20 feet of the controller when employed for encrypted line security.
22. P2000 or P2K systems use the Digi International Model Digi One SP converter or B&B Electronics Model
485OT9L converter to communicate to S321-DIN controllers.
23. The B&B Electronics Model 485OT9L converter shall be installed within the same room as the P2000 or
P2K server and within 20 feet of the server under all conditions of use.
P2000 or P2K SYSTEM
Page 2 of 3