ABB NETA-21, User Manual

Page: 48 / 196

48 Program features

Out-bound network services on the NETA-21

Safe deployment of NETA-21
The NETA-21 firmware includes many extra services as follows:
•
NBT NS discovery
•
ABB Netconfig
•
FTP
•
FTPS
•
HTTP
•
Modbus/TCP gateway
•
PC tool gateway
•
NTP
Before deployment of NETA-21 cybersecurity features, you should disable all unwanted
services. By default, the following services are disabled:
•
PC tool gateway
•
Modbus/TCP gateway
•
FTP
•
Modbus/TCP master (By default, no slaves are configured)
Port Service Purpose
21 FTP File Transfer Protocol. Reporting option for sending CSV files over the FTP
protocol to any external server. Not in use until configured.
25 / TCP
(or another
configured
port) SMTP(S) Simple Mail Transfer Protocol, outgoing e-mail. Also secure version
SMTPS is supported (typically TCP port 587 or 465). NETA-21 can send
email out if the SMTP(S) server settings and email reporting are configured.
By default, the service is not in use.
Two SMTP servers are supported (primary and secondary server). Server
names and outgoing port numbers can be configured in the web UI (
Set-
tings –> Network services ). To enable the email plug-in, go to Reports –>
Settings –> Add and select E-mail reporting .
80, 443 HTTP,
HTTPS Used for reporting data to external portal services. Not in use until config-
ured.
80 HTTP HTTP protocol is used for the Ethernet tool network slave device access, to
access FENA-11/-21 fieldbus modules and BCU-xx control boards over the
Ethernet tool network (typical use case in a local/private network only).
Connection to supported devices established if supported devices are dis-
covered.
123 / UDP NTP Network Time Service.
NETA-21 sends outgoing NTP service packets to “pool.ntp.org” by default
every hour. To configure the setting, go to
Settings –> Locale –> Date and
time . If no NTP server is found, the NETA-21 defaults to a manually config-
ured clock setting.
24576 /
UDP ABB
Netconfig Autodiscovery protocol. By default the NETA-21 sends discovery broad-
casts over the ETH2 interface every minute to discover other ABB devices
(eg, FENA-11 or BCU-xx) in a local network segment. To modify the back-
ground scan setting, go to
Settings –> Device interfaces –> Ethernet –>
Settings .