Barco BDEM-01, User Manual

Page: 55 / 68

55 K5902200 /07 Barco Demetra
• Barco recommends that the Barco Demetra Scope is connected to a high bandwidth reliable Internet
connection and is operated in an area with high quality WiFi coverage equipped with WPA2 personal or
WPA2 enterprise.
• The Demetra Scope supports the following WiFi configuration options:
-
Hidden or non-hidden network SSIDs
- Open networks without encryption is technically possible but shall be avoided for security reasons
- WiFi Protected Setup (WPS)
- WPA/WPA2 (802.11i-2004) Personal
- WPA enterprise (802.1x)
◦ PEAP with None, MSCHAPV2 or GTC as phase 2
◦ TLS (certificates can be uploaded as pfx or PKCS#12)
◦ TTLS with PAP, MSCHAP, MSCHAPV2 or GTC as phase 2
◦ EAP Password (EAP-PWD)
◦ Optional verification of CA certificates
• If the WiFi network is equipped with a captive portal, the Demetra Scope will detect this, but Barco
recommends to use a WiFi network which does not have an intermediate captive portal in place.
• At the network IP level, the Demetra Scope supports both DHCP and static IP configuration.
• The IT network to which the Demetra Scope connects should be protected from access by third party
users.
• Barco recommends for the Demetra Scope to be further configured to require a 4-digit PIN code for user
login (see
“ Configuration (admin) ” , page 13 ).
• The Demetra Scope itself should never be left unattended in the organization's facilities.
Integration of the Demetra Web Application
• The workstation used for accessing the Demetra Web Application shall be configured to only support the
latest version of the internet browsers (see
“ Minimum system requirements ” , page 12 ).
• This workstation should be equipped with a high speed (preferably) wired ethernet connection with the
same bandwidth and connection options specified for the Demetra Scope.
• A strong password policy and SSL encryption is in place when accessing the Barco Demetra Web
Application.
• Barco recommends that the workstation is correctly configured preventing unauthorized people from
accessing the workstation (e.g. but not limited to installing all latest security updates, running an antivirus,
using a strong password policy).
Furthermore users should change their passwords regularly. Barco also recommends to log out from the
web interface when it is no longer needed.
Network DNS endpoints requirements
The Demetra Scope and Demetra Web Application require network access to the following endpoints (by DNS
names):
• 2.android.pool.ntp.org: (tcp & udp: 123) for NTP
• amazontrust.com (tcp: 80 & 443)
• *.amazonaws.com (tcp: 443) for connectivity to the Demetra Cloud (located either in the Amazon AWS EU
West region in Ireland or the US East region in N. Virginia depending on account onboarding)
In addition:
EU Accounts US Accounts
demetra.barco.com (tcp: 80 & 443) demetra.barco.com and us.demetra.barco.com(tcp:80
& 443)
api.demetra.barco.com (tcp: 80 & 443) api.us.demetra.barco.com (tcp: 80 & 443)
auth.demetra.barco.com (tcp: 443) auth.us.demetra.barco.com (tcp: 443)
EHR integration
Barco allows the user to enable integration with selected EHR systems. This integration facilitates the retrieval
of patient IDs and other data from the EHR to Demetra, and the export of consultation reports, images and
metadata from Demetra back to the EHR system. The integration can be configured such that exported
images are compressed (lossy) and reduced in resolution to keep file size limited. Exported images are not
Important information