GE HEALTHCARE CARESCAPE Monitor B450, Техническое руководство

Страница: 32 / 236

CARESCAPE Monitor B450
24
2062973-003
Outbound
Packets that are part of the communication initiated by the patient monitor are allowed into
the IX Network (reflexive).
Wireless Network Security
The patient monitor can operate both in the wired and the wireless MC Network or S/5
Network. IX Network is wired only.
Refer to the Wireless LAN Network Installation Guide and S/5 Network Installation Guide for
more information regarding the security features of the wireless MC Network and the S/5
Wireless Network, respectively.
Network Identification
The Service Set Identifier (SSID), also known as network name, identifies a particular wireless
network. The patient monitors shall be configured to use the same SSID with the access points
to enable wireless communication. It is recommended to configure access points not to
broadcast SSID to the wireless network.
The wireless MC Network shall be logically separated to its own virtual LAN with a dedicated
SSID. The S/5 Wireless Network shall have dedicated access points that are physically isolated
from all other networks.
Security (Authentication and Confidentiality)
The data transmitted on the wireless network can be secured by one of the following methods:
− WEP (64-bit) (NOTE: S/5 only)
−
WEP (128-bit)
− WPA-PSK (TKIP) (NOTE: MC only)
−
WPA2-PSK (AES-CCMP) (NOTE: MC Only)
3.5.3 Product change management
GE has rigorous software verification and validation processes. Any software update needs will
be communicated by GE. The patient monitoring system, including all aspects of software,
should be used as it was intended by GE.
Source device Destination Device Protocol Destination port Use
Patient
monitor
Any icmp N/A ping
us1-ws.service.gehealthcare.
com tcp 443 InSite with ExC
(Web Services)
us1-rd.service.gehealthcare.
com tcp 443 InSite with ExC
(Remote Tunnel)
Citrix Server tcp 1494 Citrix
Printer tcp 631 Printing
MUSE tcp 80 MUSE