Table of Contents
Advertisement
Recognizing and familiarizing all parts of the system and the device's
•
communication links
•
Removing all unnecessary communication links in the system
•
Rating the security level of remaining connections and improving with applicable
methods
Hardening the system by removing or deactivating all unused processes,
•
communication ports and services
•
Checking that the security system has backups available from all applicable parts
•
Collecting and storing backups of the system components and keeping those up-
to-date
Changing default passwords and using strong enough passwords
•
Separating public network from automation network
•
Segmenting traffic and networks
•
•
Using firewalls and demilitarized zones
•
Assessing the system periodically
•
Using antivirus software in devices that are used to access the device and keeping
those up-to-date
•
Using malware prevention tools on devices used to access the device
It is important to utilize the defence-in-depth concept when designing automation system
security. It is not recommended to connect a device directly to the Internet without
adequate additional security components. The different layers and interfaces in the system
should use security controls. Robust security means, besides product features, enabling
and using the available features and also enforcing their use by company policies.
Adequate training is also needed for the personnel accessing and using the system.
7.3.2 TCP/IP based protocols and used IP ports
The EAGLE Single phase recloser supports Wifi over HTTPS protocol and supports
station mode over MQTT protocol. CIM605 Gateway is communicating with EAGLE over
MQTT. Following table lists the supported ports in the EAGLE device.
Table 12 Supported communication ports
Port number
Type
443
TCP
1883
MQTT
Information!
1. The default password for connecting to the device on HTTPS protocol in
Viewer mode is 0001. The steps to change this default password is
explained in Section 7.4.
Default state
Open
(Max data transfer rate of 11 Mbps)
Open
Description
Web server HTTPs
MQTT broker
49
Advertisement
Table of Contents
