GE HEALTHCARE CARESCAPE Monitor B650, Техническое руководство

Страница: 31 / 240

System overview
23
2062973-002
• Antivirus software
To provide seamless real-time patient monitoring, the patient monitor does not have
antivirus software.
• Security updates and patching processes
Security updates and patches cannot be applied to the CARESCAPE product without
going through GE’s vigorous software verification and validation process. Any software
update needs will be communicated by GE.
3.5.2 Security operations
Network security
GE requires that the MC port of the patient monitor be connected to a physically or virtually
dedicated CARESCAPE Network MC or S/5 Network, isolated from all other networks.
GE requires that the IX port of the patient monitor be connected to a physically or virtually
dedicated CARESCAPE Network IX with controlled connection to the organization’s general
purpose computing network. Traffic between the organization’s network and IX port of the
patient monitor must be limited to the following packet flows listed below.
Inbound
Packets that are part of the communication initiated by authorized devices in the
organization’s network are allowed to go out of the IX Network (reflexive).
Outbound
Packets that are part of the communication initiated by the patient monitor are allowed into
the IX Network (reflexive).
Source device Destination device Protocol Destination port Use
Any
Patient monitor
icmp N/A ping
Customer
defined tcp 10000 Webmin
Customer
defined tcp 10001 Software
transfer
DHCP server tcp 67, 68 DHCP
Source device Destination Device Protocol Destination port Use
Patient
monitor
Any icmp N/A ping
us1-ws.service.gehealthcare.
com tcp 443 InSite with ExC
(Web Services)
us1-rd.service.gehealthcare.
com tcp 443 InSite with ExC
(Remote Tunnel)
Printer tcp 631 Printing
MUSE tcp 80 MUSE