ABB Ability, Руководство пользователя

Страница: 70 / 100

11
A B B A B I L I T Y
T M
ED G E I N D US T R I A L G AT E WAY
70
11.3.2 Device firewall
Network security in ABB Ability
TM
Edge Industrial Gateway is accomplished by defining a set of rules used
by device. Internal firewall is a software application which allows or blocks any software program
executing within ABB Ability
TM
Edge Industrial Gateway from establishing a connection on the network.
The network connection can be an outgoing connection initiated from ABB Ability
TM
Edge Industrial
Gateway or an incoming connection to ABB Ability
TM
Edge Industrial Gateway. The outgoing connection
rules are defined by creating outbound rules and the incoming connection rules are defined by creating
inbound rules.
The rules specify whether to allow or block a connection based on some defined criteria.
The table below shows a brief summary of the rules available:
The port 5003 can be firewalled using Provision Tool. User can add Local view (web server) to be available in eth0
and limit incoming connections by source IP address (Configuration → Gateway Connectivity → To Web Server)
—
11.4 Time service
Time used in ABB Ability
TM
Edge Industrial Gateway can be synchronized using NTP client to an NTP
Server like Google NTP Server.
User can configure maximum three NTP Servers using Provisiong Tool. By default, one of the NTP time
servers is shipped along with the ABB Ability
TM
Edge Industrial Gateway (with time.google.com).
User can configured all the three NTP Servers using CCT tool.
Time Synchronization is performed at every Powerup of ABB Ability
TM
Edge Industrial Gateway & there
after everyone hour.
Rule name Rule description
HTTPS
Allows TCP connection on port 5001 & 5003. This rule allows incoming secure HTTPS traffic
for ABB Ability
TM
Edge Industrial Gateway.
MODBUS-TCP
Allows TCP connection on port 502. This rule allows incoming
Modbus messages which are further handled by Modbus Slave in ABB Ability
TM
Edge Industrial Gateway.
NTP
Allows UPD connection on port 123. This rule allows incoming
NTP messages which are further handle by NTP client in ABB Ability TM Edge Industrial Gateway.
Reject ALL incoming SSH
Rejects all TCP connection on port 22. This rule rejects all incoming TCP traffic for SSH for
ABB Ability TM Edge Industrial Gateway.
Allow outbound DNS
Allows UDP connection on port 53. This rule allows incoming DNS requests for name resolution.
—
Figure 27
—
Note: It is recommended
to set the NTP
synchronization to local
network stratum 1 clock