Cybersecurity; Disclaimer; Tcp/Ip Based Protocols And Used Ip Ports; Warning Messages Used In This Document - ABB Ability User Manual

10
A B B A B I L I T Y
—

1.3 Cybersecurity

1.3.1 Disclaimer

It is the sole responsibility of the customer to provide and continuously ensure a secure connection
between the product and the customer network or any other network. The customer is required to
establish and maintain any appropriate measures (including but not limited to the installation of
firewalls, application of authentication measures, encryption of data, installation of anti- virus
programs, etc.) to protect the product, the network, its system and the interface against any kind of
security breach, unauthorized access, interference, intrusion, leakage and/or theft of data or
information. ABB and its affiliates are not liable for damage and/or losses related to such security
breaches, unauthorized access, interference, intrusion, leakage and/or theft of data or information.

1.3.2 TCP/IP based protocols and used IP ports

To set up an IP firewall the following table summarizes the IP ports used by the device.
Interface
ETH0/Wi-Fi/Cellular
ETH0/Wi-Fi/Cellular
ETH0/Wi-Fi/Cellular
ETH1
ETH1
ETH1
ETH1
ETH1
ETH1
ETH1
ETH1
For further details on cybersecurity, please refer to
Cyber Security Deployment Guideline section
Modbus protocol is not secure as such. When this protocol is used, eavesdroppers on the local
network are able to understand the communication exchange happening with the device
—

1.4 Warning messages used in this document

1.4.1 Warning messages for harm to persons

To indicate an imminently hazardous situation which, if not avoided, will result in death or serious
injury, the following message is used:
To indicate a potentially hazardous situation which, if not avoided, could result in death or
serious injury, the following message is used:
E D G E I N D U S T R I A L G AT E W AY
T M
Port Type
53 UDP
123 UDP
443 TCP
22 TCP
5001 TCP
5003 TCP
53 UDP
67 UDP
68 UDP
502 TCP
502 TCP
DANGER!
Sign (if necessary)
TEXT THAT EXPLAINS THE HAZARD AND THE CONSEQUENCES OF NOT AVOIDING IT
Text that explains how to avoid this hazard
WARNING!
Sign (if necessary)
TEXT THAT EXPLAINS THE HAZARD AND THE CONSEQUENCES OF NOT AVOIDING IT
Text that explains how to avoid this hazard
Default state
Closed/Outbound
Closed/Outbound
Closed/Outbound
Closed/Inbound
Open/Inbound
Open/Inbound
Open/Inbound
Open/Inbound
Open/Inbound
Open/Inbound
Closed/Outbound Modbus TCP (Field devices communication)
Description
DNS (Name resolution)
NTP (Time synchronization)
HTTPS (firmware update from cloud)
SSH (ABB maintenance access)
HTTPS (Provisioning Tool)
HTTPS (Web server)
DNS (Name resolution)
DHCP (Dynamic IP)
DHCP (Dynamic IP)
Modbus TCP (Device configuration)