Siemens RUGGEDCOM ROS v5.0 User Manual page 16

Chapter 1
Introduction
siemens-cert/cert-security-advisories.htm] . Updates to Siemens Product Security Advisories can be obtained
by subscribing to the RSS feed on the Siemens ProductCERT Security Advisories website, or by following
@ProductCert on Twitter.
• Enable BPDU Guard on ports where RSTP BPDUs are not expected.
• Use the latest Web browser version compatible with RUGGEDCOM ROS to make sure the most secure Transport
Layer Security (TLS) versions and ciphers available are employed. Additionally, 1/n-1 record splitting is
enabled in the latest web browser versions of Mozilla Firefox, Google Chrome and Internet Explorer, and
mitigates against attacks such as SSL/TLS Protocol Initialization Vector Implementation Information Disclosure
Vulnerability (BEAST) for Non-Controlled (NC) versions of RUGGEDCOM ROS.
• Modbus can be deactivated if not required by the user. If Modbus activation is required, then it is recommended
to follow the security recommendations outlined in this User Guide and to configure the environment according
to defense-in-depth best practices.
• Prevent access to external, untrusted Web pages while accessing the device via a Web browser. This can assist in
preventing potential security threats, such as session hijacking.
• For optimal security, use SNMPv3 whenever possible. Use strong authentication keys and private keys without
repetitive strings ( e.g. abc or abcabc) with this feature. For more information about creating strong passwords,
refer to the password requirements in
Policy
• Periodically audit the device to make sure it complies with these recommendations and/or any internal security
policies.
• Review the user documentation for other Siemens products used in coordination with device for further security
recommendations.
Section 1.3
Supported Networking Standards
The following networking standards are supported by RUGGEDCOM ROS:
Standard 10 Mbps Ports
IEEE 802.3x
IEEE 802.3z
IEEE 802.3ab
IEEE 802.1D
IEEE 802.1Q
IEEE 802.1p
4
Section 4.3, "Configuring Passwords"
100 Mbps Ports
ü ü
ü ü
ü ü
ü ü
1000 Mbps Ports
ü
ü
ü
ü
ü
ü
.
Notes
Full Duplex Operation
1000Base-LX
1000Base-Tx
MAC Bridges
VLAN (Virtual LAN)
Priority Levels
Supported Networking Standards
RUGGEDCOM ROS
User Guide