ABB EQmatic, Руководство по эксплуатации продукта

Страница: 7 / 107

ABB EQmatic
General
6 2CDC512090D0202 | QA/S x.yy.1
Cyber security (network security)
Businesses are increasingly confronted with Internet security risks. To increase the stability, security and
robustness of its solutions, ABB has introduced official robustness tests for Internet security as part of the
product development process.
The following notes are also intended to form a guide and describe mechanisms that can be used to
improve network security.
Preventing access to the different media
The basis for any protection concept is the careful shielding of the system against unauthorized access.
Only authorized persons (installers, custodians, users) should be allowed to have physical access to the
electrical system. The critical points in every electrical installation must be protected as well as possible
during planning and installation.
In general, applications and devices should be permanently installed to prevent their easy removal and in
this way prevent access to the electrical installation for unauthorized persons.
Sub-distribution units should be sealed or be in rooms to which only authorized persons have access.
Twisted pair cabling
The ends of cables should not be visible or protrude from walls, either inside or outside the building.
If available, features for protection against theft should be used.
Bus cables outdoors represent an elevated risk. Physical access should be made particularly difficult here.
IP cabling inside the building
A separate LAN or WLAN with dedicated hardware (router, switches etc.) should be used for the technical
infrastructure.
It is imperative the normal security mechanisms for IP networks are used. These are examples:
•
MAC filter
•
Encryption of wireless networks
•
Usage of strong passwords and protection of these against access by unauthorized persons
Connection to the Internet
Access to an installation from the Internet can be made possible using VPN connections. This aspect
requires a router with VPN server functionality or a server.