Accessory Modules for IL-NT, IC-NT, IA-NT and ID-Lite Global Guide
6
User's Guide/Manual only if it agrees to verify such translation. The terms and conditions of such verification
must be agreed in the written form and in advance.
For more details relating to the Ownership, Extent of Permitted Reproductions Term of Use of the
Documentation and to the Confidentiality rules please review and comply with the ComAp’s License
Agreement, Terms and Conditions available on
Security Risk Disclaimer
Pay attention to the following recommendations and measures to increase the level of security of ComAp
products and services.
Please note that possible cyber-attacks cannot be fully avoided by the below mentioned recommendations
and set of measures already performed by ComAp, but by following them the cyber-attacks can be
considerably reduced and thereby to reduce the risk of damage. ComAp does not take any responsibility for
the actions of persons responsible for cyber-attacks, nor for any damage caused by the cyber-attack.
However, ComAp is prepared to provide technical support to resolve problems arising from such actions,
including but not limited to restoring settings prior to the cyber-attacks, backing up data, recommending other
preventive measures against any further attacks.
Warning:
Some forms of technical support may be provided against payment. There is no legal or factual
entitlement for technical services provided in connection to resolving problems arising from cyber-attack or
other unauthorized accesses to ComAp's Products or Services.
General security recommendations and set of measures
1. AccessCode
• Change the AccessCode BEFORE the device is connected to a network.
• Use a secure AccessCode – ideally a random string of 8 characters containing lowercase, uppercase letters
and digits.
• For each device use a different AccessCode.
2. Password
• Change the password BEFORE the device enters a regular operation.
• Do not leave displays or PC tools unattended if an user, especially administrator, is logged in.
3. Controller Web interface
• The controller web interface at port TCP/80 is based on http, not https, and thus it is intended to be used only
in closed private network infrastructures.
• Avoid exposing the port TCP/80 to the public Internet.
4. MODBUS/TCP
• The MODBUS/TCP protocol (port TCP/502) is an instrumentation protocol designed to exchange data
between locally connected devices like sensors, I/O modules, controllers etc. From it’s nature it does not
contain any kind of security – neither encryption nor authentication. Thus it is intended to be used only in
closed private network infrastructures.
• Avoid exposing the port TCP/502 to the public Internet.
5. SNMP
• The SNMP protocol (port UDP/161) version 1,2 is not encrypted. Thus it is intended to be used only in
closed private network infrastructures.
• Avoid exposing the port UDP/161 to the public Internet.
