Comtrol DeviceMaster PRO, Руководство по установке и настройке

Страница: 80 / 174

80 - DeviceMaster Security DeviceMaster Installation and Configuration Guide : 2000594 Rev. F
Configure/Enable Security Features Overview
Security Option Descriptions
Enable Secure Data
Mode
If
Secure Data Mode
is enabled TCP connections which carry data to/from the serial
ports will be encrypted using SSL or TLS security protocols. This includes the
following:
• TCP connections to the per-serial-port TCP ports (default is 8000, 8001, 8002, and
so forth) are encrypted using SSL/TLS.
• TCP connections to TCP Port 4606 on which the DeviceMaster implements the
Comtrol proprietary serial driver protocol are encrypted using SSL/TLS.
• Since SSL/TLS can not be used for either UDP data streams or for the Comtrol
proprietary MAC mode Ethernet driver protocol, both UDP and MAC mode serial
data transport features are disabled.
• In order to minimize possible security problems, e-mail and RFC1006 features are
also disabled in
Secure Data mode.
In addition to encrypting the data streams, it is possible to configure the DeviceMaster
so that only authorized client applications can connect using SSL/TLS. See the
Client
Authentication discussion on Page 75 for details.
Enable Secure Config
Mode
If Secure Config Mode is enabled, unencrypted access to administrative and diagnostic
functions is disabled. Secure Config Mode changes DeviceMaster behavior as follows:
• Telnet access to administrative and diagnostic functions is disabled. SSH access is
still allowed.
• Unencrypted access to the web server via Port 80 (http://URLs) is disabled.
• Encrypted access to the web server via Port 443 (https://URLs) is still allowed.
• Administrative commands that change configuration or operating state which are
received using the Comtrol proprietary TCP driver protocol on TCP Port 4606 are
ignored.
• Administrative commands that change configuration or operating state that are
received using the Comtrol MAC mode proprietary Ethernet protocol number
0x11FE are ignored.