Configuration; Web Interface; Session Timer; Account And Permission Management - Honeywell Pro-Watch 7000 Security Manual

Secure By Default
Settings

Web Interface

Default account
USB interface
SD Card Interface
SNMP communication
Discovery service
Partition encryption
Host communication

Configuration

Please refer to the PW7K User Guide for detailed configuration steps.
Web Interface
The PW7K panel supports web interface for the basic installation parameter setup.
It is recommended to:
•
•

Session Timer

The Session timer logs OFF a user when session is inactive for configured time
interval.
PW7K panel is configured with fifteen (15) minutes as default session time out
which is recommended value to minimize the risk of when an attacker can access
active sessions. Refer to the PW7K User Guide for the detailed step by step
approach for configuring "Web Session Timeout".

Account and permission Management

The PW7K has accounts, represented by users in the PW7K configuration. It is
important that these accounts are properly managed. Failure to do so can make it
easier for an attacker to penetrate the system, or make it more difficult to detect
that an attack has occurred.
PW7K Security Manual
Disable web interface before leaving panel in normal operation. Refer to the
PW7K User Guide for more details.
Enable web interface and physically using dip switches only when installer is
physically close to the panel.
Secure configuration
Disable web interface once basic configuration is done.
Remove default user login, create a unique user account with a
strong password.
Disable USB interface.
Disable SD card interface.
Disable SNMP communication.
Disable discovery service.
Enable data encryption at rest: This is necessary to protect
cryptographic keys and personal data.
Enable only TLS encryption for host communication
@Honeywell Inc 3