WebConsole - Security Options
45
NX-Series Controllers - WebConsole & Programming Guide
Security Presets
The Master provides three levels of security setting presets: Low, Medium, and High. Each level is a preset of various security
settings. The following table
describes each of the Security Presets presented on the General section of the Security page:
Once any of the settings have been modified, press the
Accept
button to save these changes to the Master. Once these changes are
saved, the following message appears:
"Device must be rebooted for the setting to take effect. To reboot, go to the System Devices
page."
A link appears which you can click to jump to the System Devices page (see the
more information.) Click the
Reboot
button to remotely reboot the target Master.
System Security Options (Cont.)
Option
Description
FTP Access
Select to enable FTP access to the Master. The default port value used for FTP communication is 21.
NOTE:
This port can be disabled/enabled, but its value cannot be changed.
Authenticate on
Server Ports
Select to require user name and password authentication on Telnet, Program, and HTTP/HTTPS ports.
Authentication is always required on FTP/SFTP and SSH ports.
NOTE:
If Authenticate on Server Ports is disabled but LDAP is enabled, a login is still required. If you do not
desire a login, LDAP must also be disabled.
Authenticate AMX
Devices On ICSLAN
Ports
Select to require user name and password authentication on devices connected to the ICSLAN ports on the Master.
ICSLAN AMX Device
Connection
Select to allow ICSP access to the Master for Device-type users connected to the ICSLAN ports. Expand the
ICSLAN AMX Device Connection section to view this option.
ICSLAN Encryption
Select to enable encryption on the ICSLAN ports on the Master. Expand the ICSLAN AMX Device Connection
section to view this option.
Authenticate AMX
Devices On LAN Ports
Select to require user name and password authentication on devices connected to the LAN ports on the Master.
LAN AMX Device
Connection
Select to allow ICSP access to the Master for Device-type users connected to the LAN ports. Expand the LAN AMX
Device Connection section to view this option.
LAN Encryption
Select to enable encryption on the LAN ports on the Master. Expand the LAN AMX Device Connection section to
view this option.
Security Presets
Preset
Low
Medium
High
Audit Log
Off
On
On
Banner Display
Off
On
On
USB Host Port
Enabled
Enabled
Disabled
Authentication On Server Ports
Required
Required
Required
Inactivity Timeout
Off
On
On
Password Expiration
Disabled
Enabled
Enabled
Cryptography Strength
Low
Low
High
Password Complexity
Low
Medium
High
Lockout Access
Off
On
On
FTP Access
Both enabled
Disabled/Enabled
Disabled/Disabled
HTTP/HTTPS
Both enabled
Disabled/Enabled
Disabled/Disabled
Telnet/SSH/SSH FTP Access
Both enabled
Disabled/Enabled
Disabled/Disabled
Authenticate AMX Devices on
ICSLAN Ports
Not required
Required
Required
ICSLAN AMX Device Connection ICSPS enabled, ICSP enabled -
without encryption
ICSPS enabled, ICSP enabled -
with encryption
ICSPS enabled, ICSP disabled
Authenticate AMX Devices on
LAN Ports
Not required
Required
Required
LAN AMX Device Connection
ICSPS enabled, ICSP enabled -
without encryption
ICSPS enabled, ICSP enabled -
with encryption
ICSPS enabled, ICSP disabled