ABB DSQC1016 Manual page 77

Connection Security
The following illustration provides an overview of the connectivity between a Service
Box installed inside a Robot Controller and ABB server and the different security
layers.
en1600001561
The Service box creates a secure connection point to point from the box to ABB
connector server.
The box should communicate outbound on Internet (from inside to outside) using
one port (HTTPS:443) and some IP addresses:
The firewall stays closed to any inbound (from external) requests.
For additional security, the box is equipped with an internal firewall and security
rules that:
Product manual - Connected Services
3HAC060439-001 Revision: E
• as.pro.talk2m.com for authentication and certifications
• device.vpn1.talk2m.com, device.vpn2.talk2m.com ... device.vpn10.talk2m.com
to create the secure tunnel
Note
ABB has secured the end of connection inside a secure ABB server managed
by a corporate firewall in the DMZ zone.
• allows traffic inside the tunnel to the box only using HTTP:80 and FTP21:
ports.
• allows outside HTTP/FTP commands from ABB only up to the firmware of
the box.
• prevents access or routing to the local LAN or WAN port from external
connections
© Copyright 2019 ABB. All rights reserved.
5 Network Service Box connectivity
Continues on next page
5.2 Connectivity
Continued
77