Product Security Advice - VESDA -E VES-A00-P Product Manual

9

Product Security Advice

Warning: Failure to comply with the requirements below exposes the system to malicious interference
which could disable smoke reporting.
Scan the QR code to access the latest security advice available from: https://xtralis.com/33252
Commissioning Requirements
All VESDAnet wiring and connection ports must be secured against unauthorized access.
l
Ethernet and Wi-Fi ports must ONLY be connected to networks which are secure and physically or
l
logically separate from business IT infrastructure.
VESDA devices including HLIs must not be accessible from the Internet. Any provision of remote
l
access to VESDA devices must be subjected to a full cyber security risk assessment and regular
review.
WPA-2 encryption must be used whenever Wi-Fi is enabled.
l
Restrict access to HLI devices to authorized personnel only.
l
Passwords must be chosen in line with the guidelines in the detector user guide and provided to trusted
l
users only.
Default PIN codes must be changed as part of the initial configuration.
l
System Maintenance Requirements
Do NOT use the USB port for long-term monitoring or allow it to be permanently wired to building
l
infrastructure. It is only to be used for configuration and maintenance by authorized personnel.
If a detector requires firmware upgrade, ensure that the upgrade package is genuine and obtained directly
l
from Xtralis.
Access to PCs on which Xtralis VSC or VSM configuration software and system configuration
l
information are installed must be restricted to authorized persons if saved passwords are used.
Xtralis PC software such as VSC or VSM, must only be installed on PCs with current active Windows
l
support from Microsoft.
www.xtralis.com
VESDA-E VES-A00-P Product Guide
105