
CHAPTER 5: SETTINGS
PRODUCT SETUP
C30 CONTROLLER SYSTEM – INSTRUCTION MANUAL
5-13
5
Figure 5-1: Login screen for CyberSentry
When the "Server"
Authentication Type
is selected, the C30 uses the RADIUS server and not its local authentication
database to authenticate the user.
When the "Device" button is selected, the C30 uses its local authentication database and not the RADIUS server to
authenticate the user. In this case, it uses built-in roles (Administrator, Engineer, Supervisor, Operator, Observer, or
Administrator and Supervisor when Device Authentication is disabled), as login accounts and the associated passwords
are stored on the C30 device. In this case, access is not user-attributable. In cases where user-attributable access is
required, especially for auditable processes for compliance reasons, use server authentication (RADIUS) only.
No password or security information is displayed in plain text by the EnerVista software or the UR device, nor are they ever
transmitted without cryptographic protection.
When CyberSentry is enabled, Modbus communications over Ethernet is encrypted, which is not always tolerated by
SCADA systems. The UR has a bypass access feature for such situations, which allows unencrypted Modbus over Ethernet.
The
Bypass Access
setting is available on the
SETTINGS
PRODUCT SETUP
SECURITY
SUPERVISORY
screen. Note that
other protocols (DNP, 101, 103, 104, EGD) are not encrypted, and they are good communications options for SCADA
systems when CyberSentry is enabled.
CyberSentry settings through EnerVista
CyberSentry security settings are configured under
Device > Settings > Product Setup > Security
.
Only (TCP/UDP) ports and services that are needed for device configuration and for customer enabled features are
open. All the other ports are closed. For example, Modbus is on by default, so its TCP port 502, is open. But if
Modbus is disabled, port 502 is closed. This function has been tested and no unused ports have been found open.
Содержание C30
Страница 12: ...1 4 C30 CONTROLLER SYSTEM INSTRUCTION MANUAL FOR FURTHER ASSISTANCE CHAPTER 1 INTRODUCTION 1...
Страница 282: ...5 126 C30 CONTROLLER SYSTEM INSTRUCTION MANUAL SYSTEM SETUP CHAPTER 5 SETTINGS 5 Figure 5 56 Disconnect switch logic...
Страница 354: ...6 16 C30 CONTROLLER SYSTEM INSTRUCTION MANUAL PRODUCT INFORMATION CHAPTER 6 ACTUAL VALUES 6...
Страница 398: ...C 6 C30 CONTROLLER SYSTEM INSTRUCTION MANUAL COMMAND LINE INTERFACE APPENDIX C COMMAND LINE INTERFACE C...
Страница 406: ...iv C30 CONTROLLER SYSTEM INSTRUCTION MANUAL ABBREVIATIONS...